Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/01554234-a758-3459-959a-80fb9e3c7426.roa
File:                     01554234-a758-3459-959a-80fb9e3c7426.roa (raw, json)
Hash identifier:          OUQz1c+mJzGWRqIfiQ6QfucEp+RxUynSxqAi8UB/CSc=
Subject key identifier:   13:0D:57:2F:CA:77:2B:3D:B5:8D:F9:EA:AD:0B:9A:20:CE:88:4F:14
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583E2A7A7C2FFC677409D5BC2400
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/01554234-a758-3459-959a-80fb9e3c7426.roa
Signing time:             Tue 07 Jun 2022 12:00:00 +0000
ROA not before:           Tue 07 Jun 2022 12:00:00 +0000
ROA not after:            Thu 08 Jun 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:2a:7a:7c:2f:fc:67:74:09:d5:bc:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jun  7 12:00:00 2022 GMT
            Not After : Jun  8 04:00:00 2023 GMT
        Subject: CN=70e98f0b-a930-47a5-82e0-060186079626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4e:74:9c:f6:6c:5b:9a:4a:8a:dc:93:3e:38:
                    ee:76:28:f5:5c:af:31:5d:51:b0:99:4d:49:67:26:
                    ff:e1:40:d5:c0:e3:ca:20:c3:8c:94:5b:32:d5:07:
                    0b:9c:d8:70:b5:82:89:50:d6:eb:61:6d:52:ab:70:
                    c7:2a:36:7b:22:92:aa:d4:d8:31:7b:3b:30:77:14:
                    c9:00:3b:76:7e:42:40:be:9b:ae:cd:30:fb:76:f2:
                    c8:60:64:c0:c7:23:62:94:32:6e:53:9b:ac:e1:bc:
                    95:ef:24:04:d0:45:61:96:90:57:64:e1:3e:1e:37:
                    f1:40:d7:3f:8e:9b:8f:b2:cd:36:fa:33:49:5f:1d:
                    6c:72:8a:92:21:86:48:73:25:89:d4:74:9a:03:b3:
                    f4:3d:42:44:19:7e:c3:40:f7:c5:2e:e1:7e:03:cb:
                    cf:3e:6b:57:5d:7c:d9:cf:25:db:bd:c3:e8:52:45:
                    29:d1:72:7a:5e:b2:4e:eb:cf:86:b2:ee:0d:23:46:
                    1d:dc:34:b3:eb:8a:79:ab:b3:0c:f0:f9:a9:6c:db:
                    b4:1d:57:f2:eb:b5:af:5c:3f:64:04:36:b6:6c:41:
                    a2:6a:08:bc:70:7c:71:17:94:d3:fa:ba:a6:f1:95:
                    ea:cf:1c:41:cf:ce:2c:4e:c3:fc:ad:72:64:a7:f3:
                    05:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0D:57:2F:CA:77:2B:3D:B5:8D:F9:EA:AD:0B:9A:20:CE:88:4F:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/01554234-a758-3459-959a-80fb9e3c7426.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:60:6a:1e:1d:d8:1c:f0:de:b9:57:cc:21:c4:14:8c:fd:f5:
         f1:23:84:3c:c6:2f:97:72:8d:b4:3f:1b:a8:bc:24:3a:18:f7:
         43:47:3d:54:bf:52:2a:80:78:da:36:79:11:1a:7f:9a:30:8f:
         53:31:6e:2b:54:49:09:e7:47:9b:f9:5f:96:50:6c:e1:f5:98:
         2e:a9:ad:b5:c8:95:76:68:5b:f1:67:c6:2b:d2:9b:dc:00:1a:
         fe:16:7c:ab:0c:34:76:3b:69:35:1b:f1:91:ff:e0:d2:a3:b3:
         3b:37:a6:f8:48:9a:4b:b6:b9:61:5e:46:ea:ba:f6:d6:9c:74:
         a5:05:76:19:6d:fe:07:81:fa:cd:e6:56:b0:ec:24:9d:06:bd:
         c1:5b:b9:56:1e:01:82:55:14:93:0f:4f:ce:f9:12:60:89:e0:
         d6:e6:a0:9d:a1:43:2e:aa:b4:ce:a6:0c:b9:16:7d:5e:f4:1c:
         0d:ce:a0:d9:f6:30:77:6c:c8:57:16:c3:7c:55:2c:06:68:36:
         93:8d:8f:39:88:9a:62:ab:15:25:ed:4a:5d:31:dd:ac:98:a5:
         c1:12:3c:75:fb:75:53:18:01:24:c7:e5:5b:54:c1:96:42:d0:
         c1:96:04:45:09:87:13:6c:d4:69:a0:b5:ab:7c:17:7f:26:9f:
         20:a6:eb:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4qenwv/Gd0CdW8JAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDYwNzEyMDAwMFoXDTIzMDYwODA0MDAwMFowLzEtMCsGA1UEAxMk
NzBlOThmMGItYTkzMC00N2E1LTgyZTAtMDYwMTg2MDc5NjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E50nPZsW5pKityTPjjudij1XK8xXVGwmU1J
Zyb/4UDVwOPKIMOMlFsy1QcLnNhwtYKJUNbrYW1Sq3DHKjZ7IpKq1NgxezswdxTJ
ADt2fkJAvpuuzTD7dvLIYGTAxyNilDJuU5us4byV7yQE0EVhlpBXZOE+HjfxQNc/
jpuPss02+jNJXx1scoqSIYZIcyWJ1HSaA7P0PUJEGX7DQPfFLuF+A8vPPmtXXXzZ
zyXbvcPoUkUp0XJ6XrJO68+Gsu4NI0Yd3DSz64p5q7MM8PmpbNu0HVfy67WvXD9k
BDa2bEGiagi8cHxxF5TT+rqm8ZXqzxxBz84sTsP8rXJkp/MF6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMNVy/Kdys9tY356q0LmiDOiE8UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvMDE1NTQyMzQtYTc1OC0z
NDU5LTk1OWEtODBmYjllM2M3NDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHRgah4d2Bzw3rlXzCHEFIz99fEjhDzGL5dyjbQ/G6i8JDoY90NHPVS/
UiqAeNo2eREaf5owj1MxbitUSQnnR5v5X5ZQbOH1mC6prbXIlXZoW/FnxivSm9wA
Gv4WfKsMNHY7aTUb8ZH/4NKjszs3pvhImku2uWFeRuq69tacdKUFdhlt/geB+s3m
VrDsJJ0GvcFbuVYeAYJVFJMPT875EmCJ4NbmoJ2hQy6qtM6mDLkWfV70HA3OoNn2
MHdsyFcWw3xVLAZoNpONjzmImmKrFSXtSl0x3ayYpcESPHX7dVMYASTH5VtUwZZC
0MGWBEUJhxNs1Gmgtat8F38mnyCm68M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:48 2023 by rpki-client on console-fra.rpki-client.org