Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/07e0e964-5ce0-3023-a59f-97d3f7ee5421.roa
File:                     07e0e964-5ce0-3023-a59f-97d3f7ee5421.roa (raw, json)
Hash identifier:          aFPJRbNytZ/DSdgauwJrvezKBlIU6azasjiPvCzwyFk=
Subject key identifier:   5B:DA:0E:5E:F7:99:A4:CC:2B:8F:AA:1D:76:AE:C8:4B:B0:B6:65:C0
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583FE400B538DA6FFDF97A0EC240
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/07e0e964-5ce0-3023-a59f-97d3f7ee5421.roa
Signing time:             Sat 12 Nov 2022 12:00:00 +0000
ROA not before:           Sat 12 Nov 2022 12:00:00 +0000
ROA not after:            Mon 13 Nov 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e4:00:b5:38:da:6f:fd:f9:7a:0e:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Nov 12 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2023 GMT
        Subject: CN=32ed2c50-46b8-41fa-a1bc-fc6b7236dca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:ea:b8:ca:2d:9e:09:f1:65:91:58:d6:87:
                    9d:8e:d9:d8:89:6d:c2:94:ec:b0:ce:24:80:6d:05:
                    5f:8f:ee:1e:bb:e4:a2:61:79:9e:5f:bf:2f:32:c7:
                    84:05:48:27:56:e0:76:c2:6f:d8:ed:72:ff:22:22:
                    8f:8f:27:47:2a:f4:50:45:64:72:c7:e0:82:32:98:
                    e3:5a:a6:31:eb:81:38:0e:b7:77:ee:71:71:bb:49:
                    ff:87:3f:5f:d5:0f:27:a2:f2:03:7a:81:79:44:96:
                    97:44:66:a8:06:1d:6f:24:8c:61:81:2c:00:12:28:
                    e1:5e:dd:44:36:71:a2:3a:d9:c3:b1:af:cd:1b:19:
                    b2:aa:91:39:c8:92:6b:17:7d:40:32:aa:8d:c0:70:
                    31:13:b3:77:4b:9d:6f:8e:72:bb:e4:3b:c1:a8:cc:
                    71:94:4e:26:94:4b:fb:aa:6a:16:1e:af:75:06:e1:
                    33:0d:ca:87:39:37:1e:30:d6:13:2d:c9:43:ec:40:
                    49:ea:a9:d0:bd:c7:14:cb:0a:de:df:77:c7:51:92:
                    68:c4:26:a6:0c:ff:c1:0f:f6:1c:77:5c:bf:8c:3b:
                    da:3c:17:56:eb:cb:b2:6d:e2:d0:cd:60:54:09:cd:
                    d8:1c:9b:26:a6:1d:54:63:95:00:36:10:d0:f2:53:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DA:0E:5E:F7:99:A4:CC:2B:8F:AA:1D:76:AE:C8:4B:B0:B6:65:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/07e0e964-5ce0-3023-a59f-97d3f7ee5421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:f1:a4:23:c7:9d:bf:61:d5:f5:68:50:a0:67:4e:5a:ec:dc:
         9e:2c:00:e7:d4:2e:32:69:65:3c:b3:25:74:e0:bb:f7:06:4f:
         ab:f2:e4:2e:e5:96:1b:f0:93:b4:0e:d0:56:0b:2a:6c:b7:f8:
         de:7e:66:bc:31:28:51:45:f7:b9:a4:cf:cc:65:d8:4e:6e:0d:
         d9:84:b4:6a:8e:f8:7f:a1:a8:a1:52:ba:e9:a0:7f:1d:e9:8a:
         64:a8:7e:10:56:7f:84:24:1e:44:b1:2a:00:21:1b:f5:97:2d:
         3b:ef:a4:e0:8d:ab:ff:73:23:d6:db:ee:62:bb:20:4c:6f:b5:
         94:29:79:f7:ea:c7:bd:bf:bf:06:7c:9a:ab:e8:b8:93:53:a2:
         86:df:6c:25:3d:08:c9:32:2d:b9:40:23:e2:eb:c0:41:b5:49:
         28:da:f1:a4:b2:23:02:05:c9:cb:55:0f:e8:11:3d:8e:1b:87:
         e4:52:21:a4:64:3e:06:16:3a:9c:95:eb:e0:9b:ed:e9:0d:27:
         39:79:59:fe:64:cb:14:0f:3c:1e:9a:60:c8:f0:97:49:ea:fe:
         2c:3c:78:8e:84:66:05:ce:41:39:7c:25:06:ba:82:bb:e9:d6:
         bb:bf:44:68:10:16:c9:6c:21:70:04:2f:cd:9e:5b:0d:df:b9:
         45:bd:a4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----