Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/28eb778a-c384-33bf-911b-e0d78cb6513a.roa
File:                     28eb778a-c384-33bf-911b-e0d78cb6513a.roa (raw, json)
Hash identifier:          VSKw1NdQ369LmbHUiW/q9twSVj4UArQeKN3O8Jj387M=
Subject key identifier:   A4:10:E7:61:81:97:BA:4C:A4:79:E9:86:51:B0:69:E1:54:E2:20:56
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583E653C552D71458107D49D4700
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/28eb778a-c384-33bf-911b-e0d78cb6513a.roa
Signing time:             Tue 28 Jun 2022 12:00:00 +0000
ROA not before:           Tue 28 Jun 2022 12:00:00 +0000
ROA not after:            Thu 29 Jun 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:65:3c:55:2d:71:45:81:07:d4:9d:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jun 28 12:00:00 2022 GMT
            Not After : Jun 29 04:00:00 2023 GMT
        Subject: CN=1f2effee-e3c1-4b49-90ce-bd015a1e1a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:3d:4b:d0:9d:73:ae:01:5b:22:94:b0:57:
                    db:1c:b8:80:ef:fb:f1:ab:7a:af:65:7f:4c:69:2a:
                    5b:a9:03:d7:c0:df:59:fd:b4:92:16:97:a6:76:fb:
                    cd:19:f0:03:bd:2d:f9:97:e4:ea:35:e9:31:21:b3:
                    9d:e1:aa:ad:48:dc:2f:99:88:0d:78:db:b4:a6:2f:
                    f6:50:be:20:e9:cb:69:ef:f9:19:9c:9c:e7:f7:ba:
                    1a:46:77:40:1e:eb:5b:a6:38:ec:92:04:05:49:19:
                    30:2c:65:0d:9c:09:b4:fd:c6:c6:d8:59:70:c0:18:
                    7c:90:2f:3d:ee:7d:bd:ed:93:2e:0f:84:8f:4a:70:
                    2d:cc:10:08:20:7d:53:ed:d5:18:c0:c0:32:ff:78:
                    51:4c:33:e7:9c:b7:f4:07:4a:8a:61:13:7c:8d:72:
                    58:b2:d8:40:6e:27:67:d0:18:a4:3f:56:c7:48:c4:
                    d6:67:55:0b:73:df:e7:74:7d:9c:6a:6a:64:07:97:
                    bb:2e:e9:6f:af:69:e3:56:36:51:b7:41:5c:97:03:
                    09:b6:1b:0b:45:2e:c1:d8:87:ba:e8:d1:f0:90:e7:
                    b6:76:29:21:57:cd:23:ec:22:46:6f:ed:a9:03:e5:
                    d5:3f:59:91:a5:7a:af:76:d9:bc:45:30:f6:dc:7f:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:10:E7:61:81:97:BA:4C:A4:79:E9:86:51:B0:69:E1:54:E2:20:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/28eb778a-c384-33bf-911b-e0d78cb6513a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1a:3f:0a:c9:53:6b:41:e2:9b:32:48:ce:1b:c6:b3:d1:85:
         ab:1b:4c:9d:7e:d4:9a:7d:45:7c:e2:55:08:fd:3a:f4:c0:77:
         24:0a:14:4e:ac:cf:e5:84:34:3f:ee:77:6d:f1:17:84:83:cb:
         c7:9d:94:35:62:06:ad:8b:f9:33:61:33:c3:2e:ad:0a:3c:e8:
         35:9b:34:fe:b7:2e:6c:6d:57:50:00:66:0e:c8:6b:91:e9:a3:
         91:ef:a0:35:c5:64:34:66:57:81:0d:21:53:54:37:62:22:5a:
         a4:30:bf:47:52:b0:55:87:34:b9:d7:89:98:60:10:f7:77:fe:
         83:ea:e9:11:a0:02:99:4b:68:d3:fa:b8:dd:05:01:6d:b2:22:
         40:1f:51:35:9c:e0:f5:26:50:2a:8e:8b:62:cf:72:82:ed:2a:
         08:2d:f1:67:f8:e8:4a:df:76:c5:06:f1:24:29:99:ad:5a:8e:
         7d:b1:36:42:94:25:58:15:d7:85:32:f7:29:f1:06:31:84:6d:
         12:ba:0b:27:99:73:96:ff:f1:8f:23:61:95:45:7e:e2:d4:ed:
         a2:57:ac:dd:e2:ae:fa:b8:4b:bf:2c:58:a8:98:ea:19:ae:ca:
         eb:b8:5e:8f:35:0d:ef:d5:5f:b0:cb:58:0c:a8:b0:80:b5:ff:
         c4:2f:51:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----