Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/057d57a2-de90-3edf-b46d-2cb7f7097bb4.roa
File:                     057d57a2-de90-3edf-b46d-2cb7f7097bb4.roa (raw, json)
Hash identifier:          uBhfQkwszC04AdcmCCjSpU/svJbpSNxfzONtD+ajNfw=
Subject key identifier:   3A:5C:0B:80:14:D9:EB:A3:40:3C:F0:22:62:B0:60:94:60:0B:53:A1
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583E27F82EC6B6E6E77DC0316DC0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/057d57a2-de90-3edf-b46d-2cb7f7097bb4.roa
Signing time:             Mon 06 Jun 2022 12:00:00 +0000
ROA not before:           Mon 06 Jun 2022 12:00:00 +0000
ROA not after:            Wed 07 Jun 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:27:f8:2e:c6:b6:e6:e7:7d:c0:31:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jun  6 12:00:00 2022 GMT
            Not After : Jun  7 04:00:00 2023 GMT
        Subject: CN=e39b6e62-26f2-4fc3-b663-bc4cf455d81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f7:3e:b4:40:47:60:c0:78:3e:29:4d:2f:ea:
                    71:15:29:70:c6:a8:60:8c:a3:fc:ba:e1:84:95:8c:
                    1a:51:47:da:24:84:e2:a9:85:ea:25:0d:c9:c9:5c:
                    b6:a5:3a:5d:af:1b:75:4b:16:25:8e:2d:e7:c9:a7:
                    3e:5a:4c:dd:1c:97:db:af:b2:78:23:9c:3a:24:6d:
                    56:c2:09:1a:77:2e:f8:ee:10:7d:7e:f0:9b:35:8c:
                    ad:de:d5:7a:c6:b5:7a:e4:26:44:8a:47:21:a5:78:
                    d1:d0:a8:cc:9a:16:39:d3:3c:ff:0d:dc:45:76:dc:
                    cf:50:ca:5b:05:6a:7b:0d:ee:53:d2:8c:0c:04:dd:
                    ed:f4:f3:8f:93:08:21:28:2b:23:a3:1c:12:4d:db:
                    9b:57:77:d9:3b:4c:6d:ee:5b:87:52:59:ce:2a:ae:
                    68:8a:67:5d:0c:c0:23:7d:66:00:6b:71:1d:71:1a:
                    61:a2:d9:5d:00:36:0b:53:f3:08:de:39:9c:20:87:
                    7c:1a:b6:2c:09:c0:9a:99:e0:35:75:4d:b0:c6:80:
                    b0:28:31:5f:8e:4a:23:be:88:41:12:fd:85:09:0c:
                    19:35:61:20:2c:0a:3f:f3:ba:4c:83:0a:95:fe:86:
                    90:c2:3c:1c:94:39:5d:79:d2:73:f2:60:d8:81:3e:
                    ae:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5C:0B:80:14:D9:EB:A3:40:3C:F0:22:62:B0:60:94:60:0B:53:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/057d57a2-de90-3edf-b46d-2cb7f7097bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:47:38:ff:4f:34:2d:88:ec:99:0d:b3:aa:71:92:3d:56:64:
         21:52:72:da:46:23:a6:e3:10:39:24:cc:eb:0f:f3:0c:c4:c5:
         ea:13:ee:35:aa:07:1f:2f:58:c7:7c:21:fd:1e:73:de:69:c5:
         da:af:4f:51:f1:ad:72:88:a7:fa:d3:83:2e:aa:d9:50:0b:b7:
         01:99:69:66:fd:9a:02:10:58:fe:77:0d:f7:c9:a8:bd:9c:4a:
         79:fa:05:b1:dc:bd:f1:4e:bc:94:e3:13:5d:47:f1:38:d4:ed:
         bd:f5:34:ac:b1:5f:37:5e:4a:67:e5:fa:8c:4f:31:21:61:59:
         6e:b2:07:c0:b0:27:ce:ba:cd:82:18:3a:e4:4d:d0:57:a7:fa:
         49:35:44:eb:a1:76:2e:c0:b2:08:1e:de:07:13:a7:8a:ab:8a:
         25:9e:56:1c:7e:df:e0:83:4b:7e:8a:94:d1:89:95:1a:83:58:
         f6:84:a3:4a:70:d5:be:e9:be:e3:94:de:96:85:0b:0d:1d:7b:
         52:d3:c5:c5:4e:ad:d2:79:6c:c2:ba:94:85:d1:38:1c:80:7c:
         48:92:ee:44:5e:2d:a1:47:06:7d:b1:7b:1e:e7:28:7b:a5:b0:
         59:a6:1e:cc:9b:d3:fc:53:00:03:23:c6:8c:d3:c1:bf:85:85:
         2d:1f:74:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:48 2023 by rpki-client on console-fra.rpki-client.org