Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/10d29cf2-bc42-37b4-a6fe-37f3c33582ce.roa
File:                     10d29cf2-bc42-37b4-a6fe-37f3c33582ce.roa (raw, json)
Hash identifier:          LN/T1GJa0zNfSOPJeES763M7eBcImBKyZi9baXj87WE=
Subject key identifier:   4F:DA:F1:C0:06:17:99:01:78:5D:DB:B1:8F:99:E8:6F:AE:14:A9:DA
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583D3807FFA33B607B0114C49900
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/10d29cf2-bc42-37b4-a6fe-37f3c33582ce.roa
Signing time:             Sun 13 Mar 2022 05:00:00 +0000
ROA not before:           Sun 13 Mar 2022 05:00:00 +0000
ROA not after:            Mon 13 Mar 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:38:07:ff:a3:3b:60:7b:01:14:c4:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Mar 13 05:00:00 2022 GMT
            Not After : Mar 13 04:00:00 2023 GMT
        Subject: CN=b1c47782-963f-4b2e-8e9a-0adca0768dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:62:a6:a5:0d:78:3d:df:7b:48:c0:80:3b:
                    79:e1:06:fc:9c:92:4e:b8:e9:16:94:6b:92:9a:1e:
                    1f:55:08:f0:06:ab:2d:5f:4a:4c:ec:d3:b4:c9:95:
                    30:17:1f:58:13:e3:dd:3f:73:e5:7d:f8:b4:69:e3:
                    3b:fe:d2:95:77:cc:a9:6e:4a:f9:da:93:73:7d:04:
                    7e:ed:4c:d1:de:6c:34:d8:30:fd:63:40:ab:f2:0c:
                    2c:1a:6c:16:6c:c6:6e:6d:79:af:73:3c:60:5c:34:
                    bf:35:27:c3:cc:ee:bb:fb:e5:c0:e0:85:77:e2:ed:
                    d1:ba:72:c3:79:09:26:d1:70:6d:23:93:23:c5:48:
                    fb:02:61:6d:1c:e5:4d:5e:cf:54:1d:ef:05:5e:3e:
                    22:0b:d6:ca:de:10:ce:76:31:70:22:51:ed:14:22:
                    22:c8:d7:ba:e3:bc:2b:c0:f6:5c:50:8a:a1:ba:71:
                    e5:e9:6d:8f:fa:14:32:fc:d1:2c:6e:0b:d4:07:d1:
                    e6:3b:86:7e:fe:0e:50:ff:5d:9b:ca:71:3f:9b:6e:
                    2b:f6:a6:68:bd:dd:1d:62:2a:ad:e0:21:0c:42:07:
                    0c:ed:46:8f:47:5c:54:84:1b:be:18:bd:39:c9:a4:
                    42:ee:f0:3a:27:fd:dd:0e:08:d7:54:51:c2:01:0f:
                    e7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DA:F1:C0:06:17:99:01:78:5D:DB:B1:8F:99:E8:6F:AE:14:A9:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/10d29cf2-bc42-37b4-a6fe-37f3c33582ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:62:89:a1:35:91:10:b0:63:86:55:b2:c4:e0:0d:3b:19:b7:
         27:c2:59:f6:0e:54:41:bb:14:a2:23:11:c6:29:3b:ed:00:d1:
         ac:c6:ee:f0:c0:cf:79:ed:ae:2e:26:53:8c:9e:99:77:c2:f9:
         79:89:0f:2b:ae:44:bd:c4:31:38:1c:ca:0a:ad:98:88:01:2e:
         ce:ac:99:c7:56:89:48:01:7a:48:94:32:22:eb:8a:3d:96:04:
         0d:b9:ba:50:4d:14:c7:8f:79:25:1c:a2:f0:5b:05:16:cd:9c:
         0a:26:b8:87:a4:e0:be:48:46:8e:9d:86:5c:3e:f4:38:5d:00:
         fd:18:78:14:ef:4c:78:9a:35:0a:cd:2e:98:bf:42:f5:f5:13:
         b3:81:d4:20:d9:e0:f1:05:3f:84:9e:ac:b2:4f:17:37:b5:62:
         7f:e5:c0:a9:54:b1:af:50:8d:93:ab:25:67:30:01:eb:a7:1a:
         51:0a:21:60:8d:65:96:64:0a:d5:85:9c:60:8f:7e:41:cd:07:
         9c:ae:7a:f0:c6:db:1d:ce:11:bc:89:27:f0:14:56:e3:52:2c:
         f4:bd:49:f0:3e:5f:90:85:ec:89:01:d7:be:24:79:6c:71:98:
         2a:cd:7b:57:c6:01:11:ea:20:28:b1:61:5a:f8:0e:af:4b:d3:
         ff:12:8a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----