Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/211e8db8-c0a9-3680-b6fe-7978dcc2e6ab.roa
File:                     211e8db8-c0a9-3680-b6fe-7978dcc2e6ab.roa (raw, json)
Hash identifier:          evVqLfrrQDkrhcfvO+R4b95hGRVCFyBZBKI6mocLWNo=
Subject key identifier:   E2:FF:E9:64:B3:F2:C3:BA:28:08:81:5A:1C:28:43:C9:79:35:28:0F
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583FEC7072253F93990782233940
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/211e8db8-c0a9-3680-b6fe-7978dcc2e6ab.roa
Signing time:             Tue 15 Nov 2022 12:00:00 +0000
ROA not before:           Tue 15 Nov 2022 12:00:00 +0000
ROA not after:            Thu 16 Nov 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ec:70:72:25:3f:93:99:07:82:23:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Nov 15 12:00:00 2022 GMT
            Not After : Nov 16 05:00:00 2023 GMT
        Subject: CN=682fc463-ccfd-4173-9a28-d286e125737e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:78:6a:d5:19:0f:71:66:a3:1f:4a:1c:e7:
                    b9:9a:c5:f2:02:f7:ed:fa:10:a3:b1:34:13:79:95:
                    22:d7:c1:ba:bb:18:06:22:05:99:27:75:b4:0f:1c:
                    c9:31:a0:8f:85:bf:58:9a:a3:d7:d0:13:2c:2d:c8:
                    12:b7:b4:22:1f:e7:2f:23:78:cb:fa:51:87:13:83:
                    40:1c:c6:87:6d:9d:d0:06:0b:86:b9:19:b4:8f:c5:
                    8b:31:85:a8:83:2f:b6:b0:2f:4a:c2:de:03:a8:c6:
                    4f:a9:b7:3e:de:42:8f:cf:ed:99:bb:47:a0:75:8e:
                    b4:28:b5:48:8d:f7:87:6a:46:c9:d1:ef:c0:15:29:
                    f8:fb:32:15:5e:ac:21:7f:f0:02:f0:68:a4:73:df:
                    6d:b6:ed:2f:78:37:bf:36:b2:55:56:9e:bb:85:00:
                    d8:8e:c1:9c:2e:c5:0d:4c:1e:63:e7:b4:d5:94:e7:
                    0e:27:5e:c4:6c:43:4b:ed:8f:23:50:f2:e9:a1:76:
                    21:5a:85:60:6b:7e:98:08:4e:30:72:e7:3c:8f:25:
                    96:53:b5:07:fe:59:ac:d5:65:0e:d0:17:53:c0:db:
                    9d:72:37:fd:b6:ea:65:c0:a7:03:97:e8:52:fe:79:
                    82:84:65:ff:5d:cc:02:23:5a:41:fd:54:5f:1a:b6:
                    56:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FF:E9:64:B3:F2:C3:BA:28:08:81:5A:1C:28:43:C9:79:35:28:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/211e8db8-c0a9-3680-b6fe-7978dcc2e6ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3c:fa:22:ea:33:27:86:70:43:c6:a9:2f:12:2e:3a:e9:20:
         ef:ca:68:c4:c7:a0:1a:06:e6:30:7c:1f:80:bd:43:95:79:31:
         7d:83:6b:3d:ae:9c:2f:d7:ad:9d:cc:7c:9f:74:9e:08:07:9e:
         f6:3e:a2:82:56:24:54:c6:2d:cb:d8:55:0a:6e:07:2f:68:4f:
         3a:30:ab:ca:34:1e:a5:2c:23:6b:0c:22:90:96:87:48:91:45:
         bc:70:f4:b2:0b:c0:da:65:0b:b1:ba:14:02:5e:99:06:a6:7c:
         2d:ea:39:db:1d:78:31:13:6f:91:1c:d4:fe:e8:8e:8b:c3:9b:
         fb:3a:be:aa:1c:6f:a9:dc:0d:08:56:ae:30:fe:eb:10:8a:8a:
         90:9c:b7:05:e3:61:f7:05:a8:81:20:35:3b:a6:22:8c:60:e5:
         5b:8a:b8:78:b2:df:fc:4c:be:be:e0:83:6c:8c:1b:f6:c2:64:
         4c:bb:24:d4:7e:5c:ed:fc:6e:88:50:17:6f:14:e8:ee:b5:ce:
         14:a1:bd:b3:88:90:bf:b5:d6:50:20:da:5f:b1:3b:fa:29:60:
         9e:ba:ff:73:08:ba:32:53:35:71:f8:65:67:b0:36:75:f2:0a:
         d7:11:27:99:e7:86:89:52:af:68:be:b3:a2:2e:dc:74:1b:00:
         16:54:ab:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----