Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e40bac21-1571-3836-b6d4-5c7838fbc1d9.roa
File:                     e40bac21-1571-3836-b6d4-5c7838fbc1d9.roa (raw, json)
Hash identifier:          H0qeVPjFK/XCu7hwinzQRPNeWDNxbfPG+hemc4XH1Tk=
Subject key identifier:   2D:F8:6B:F0:84:93:18:06:92:5C:68:28:16:EC:B3:54:5A:66:C3:40
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553332359C1533179E08FAA90
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e40bac21-1571-3836-b6d4-5c7838fbc1d9.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        209.92.78.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:23:59:c1:53:31:79:e0:8f:aa:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=b6b3fb86-f40f-4bc0-a225-c28167390445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:a1:d4:9a:d0:49:62:32:f6:ec:f4:6b:ee:
                    10:fc:34:cc:3b:b8:82:49:7f:56:e9:ef:a1:71:6a:
                    57:c7:e9:78:6f:17:26:f6:eb:a4:ce:ba:76:20:7c:
                    fd:0e:6c:cd:2d:fe:41:29:4e:88:b5:90:26:88:74:
                    85:02:7d:04:e3:bc:92:4a:b6:9a:1b:51:c5:ae:94:
                    6e:4c:f6:cc:f0:71:c6:1d:b1:4f:9a:53:f6:84:8d:
                    ee:4f:04:ca:16:79:e8:ce:55:84:b6:58:9e:00:85:
                    c4:01:04:01:f7:65:02:4e:ad:f5:c4:7d:b4:b7:41:
                    53:db:2f:87:bd:d6:7e:cb:31:da:2b:bb:a1:c9:13:
                    62:1c:79:a9:3b:d6:9e:fc:c5:59:8c:58:75:25:f4:
                    da:10:32:24:3e:a7:51:c5:47:b7:39:08:a4:89:e2:
                    35:82:9b:21:48:40:f9:a3:e4:8e:cc:29:83:2d:5c:
                    5b:89:f4:11:b1:c4:cd:79:dd:4a:a3:91:07:3c:9b:
                    46:9d:07:3c:82:d6:65:07:50:21:7e:50:c5:1a:d1:
                    41:87:3d:86:18:61:b3:fe:8e:94:cc:5d:95:ea:eb:
                    e8:a4:a2:96:95:50:5d:03:46:5e:53:31:aa:f9:41:
                    b6:ae:e2:8c:4f:3a:b3:b4:5e:bf:54:9a:fb:5c:d8:
                    74:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F8:6B:F0:84:93:18:06:92:5C:68:28:16:EC:B3:54:5A:66:C3:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e40bac21-1571-3836-b6d4-5c7838fbc1d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:67:3f:54:b5:f6:83:2c:ba:1c:4b:12:fa:e6:33:57:93:24:
         32:ce:21:62:6c:4d:2f:22:e8:34:21:ad:84:2a:a7:37:1e:1f:
         f7:60:eb:aa:2a:23:ca:c9:08:a6:cd:ff:ac:e8:2e:70:27:40:
         89:e7:58:e6:e7:bd:a4:c1:9f:a1:ab:f1:11:b3:fb:d1:96:ef:
         e7:7c:f3:58:79:61:10:d3:6b:d2:81:d6:c0:41:40:69:b3:a9:
         ae:0e:54:a6:3f:e8:56:f4:61:df:2f:aa:cd:75:de:96:90:b6:
         75:f0:f6:c6:44:83:91:33:38:1b:72:6c:2a:35:d6:50:c5:02:
         8d:73:f5:a3:02:36:00:8a:8b:9e:80:93:d5:70:22:8a:6e:5e:
         cd:ee:a3:f7:a6:d1:b0:6e:49:13:3d:6a:71:5a:e7:e0:12:d9:
         00:d9:2c:24:22:c3:53:e9:99:c8:5f:95:e5:e1:f2:46:da:c5:
         c7:21:a0:9e:54:25:9a:bf:9c:a0:49:6b:d2:70:0b:89:9a:9f:
         a2:9e:61:89:45:c6:59:5f:ad:72:a3:39:89:db:47:7e:a9:f9:
         d2:9d:6d:3f:cc:24:60:79:e9:b6:70:b8:9a:ce:a4:90:4b:fd:
         e4:39:02:51:d9:58:58:1e:ef:a2:cd:70:73:23:ac:15:38:57:
         f8:2d:8e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----