Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0528b158-8ca5-3e68-8e22-0972c045ed50.roa
File:                     0528b158-8ca5-3e68-8e22-0972c045ed50.roa (raw, json)
Hash identifier:          HOXT8ntXhG9wd9mDv6kR8QFkC4jnubEApGXnIa/NJco=
Subject key identifier:   63:B9:01:8B:9E:65:91:49:66:97:AD:10:76:FE:28:20:8B:15:30:90
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583FF7190CAA08338BD1175F1F00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0528b158-8ca5-3e68-8e22-0972c045ed50.roa
Signing time:             Sat 19 Nov 2022 12:00:00 +0000
ROA not before:           Sat 19 Nov 2022 12:00:00 +0000
ROA not after:            Mon 20 Nov 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f7:19:0c:aa:08:33:8b:d1:17:5f:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Nov 19 12:00:00 2022 GMT
            Not After : Nov 20 05:00:00 2023 GMT
        Subject: CN=c14ba5e7-5705-4498-89d9-f62f87c8dbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c3:56:54:db:78:ba:ef:60:91:96:e8:ae:e8:
                    01:92:30:30:22:b7:66:58:37:83:72:c0:8d:27:7b:
                    f7:d6:68:15:ac:af:5d:3a:90:3b:21:23:af:5b:76:
                    03:a0:b2:82:2b:6b:55:8c:f2:de:c1:48:6b:8b:8b:
                    20:50:bd:82:be:7f:90:f8:93:e3:49:b9:93:8d:ca:
                    85:33:39:25:4f:84:1f:57:9d:61:e6:8c:56:b3:ad:
                    48:97:ea:1a:98:63:4a:b8:e3:85:dd:89:b6:1f:78:
                    ee:ef:17:50:50:2e:4e:dd:3b:71:59:a0:89:54:d3:
                    46:be:2d:d7:4a:e2:ab:3d:12:7e:9c:39:7b:21:e1:
                    49:57:50:dd:f2:8a:bc:25:fa:51:c8:44:68:c9:8c:
                    37:a3:f4:1f:9e:37:b8:53:ab:88:3d:e3:0e:a0:1f:
                    de:b7:e7:e2:ce:0a:de:7f:d4:89:2c:ad:79:7a:0f:
                    f4:b5:82:e5:5c:36:52:98:7a:20:7c:d8:2a:0f:58:
                    b7:22:5d:d4:5c:06:06:dc:5f:2e:8e:1a:ca:ba:30:
                    88:26:30:e1:93:2c:01:61:34:0b:18:2d:17:0c:d8:
                    99:90:d4:b6:e7:16:c0:6e:e3:a0:3e:20:06:9f:8f:
                    e9:89:41:c7:9f:53:f5:12:a9:f4:1b:b5:79:61:15:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B9:01:8B:9E:65:91:49:66:97:AD:10:76:FE:28:20:8B:15:30:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0528b158-8ca5-3e68-8e22-0972c045ed50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:30:43:c5:78:38:9c:4a:2d:f2:9b:3b:63:38:78:f0:4b:ae:
         a3:9a:2b:0b:fe:c6:ed:df:1a:71:02:4b:a7:d4:92:49:5b:61:
         97:3b:c2:11:95:fe:7a:e6:34:9a:32:59:db:94:15:97:e4:2a:
         20:24:fa:a3:00:a8:f3:e3:30:1f:a0:29:6c:77:5f:8b:fe:52:
         de:3e:b3:46:09:06:be:da:96:55:12:a3:49:5a:31:2a:86:37:
         7e:4d:08:89:2c:e2:a6:6a:15:c6:81:73:2c:52:2a:30:0c:ad:
         21:87:86:94:5b:b9:68:f5:fb:48:eb:39:49:a1:b7:6b:97:fd:
         97:e7:08:11:92:7c:c0:33:32:9c:61:44:d0:89:66:85:eb:03:
         f4:ae:fd:de:7c:ac:3a:7b:f5:0c:80:9f:7c:4d:cd:49:6e:fc:
         95:61:86:82:b8:a4:bd:c3:67:00:8d:23:d5:9a:1b:59:b0:91:
         89:fa:13:e4:d1:b0:e9:00:89:28:1f:15:cb:b4:16:d4:24:ee:
         b5:0a:ca:11:c8:a0:69:3d:79:87:b7:a4:98:88:f4:a4:0c:02:
         c0:62:f8:6b:cf:48:de:4a:60:7f:87:9c:ad:a9:70:21:54:29:
         ea:88:4a:59:15:3d:64:ce:df:3e:a5:69:51:71:eb:bf:c0:41:
         20:d6:cf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----