Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/35a88d5f-7178-3122-a82e-37bfcb2d50d2.roa
File:                     35a88d5f-7178-3122-a82e-37bfcb2d50d2.roa (raw, json)
Hash identifier:          r+c0sgzdc4389FjrwIdH6Zf/6wsKZq2q1mWJZ0sxkzM=
Subject key identifier:   D9:1B:77:97:D7:89:12:BE:B4:AD:B2:25:D0:1E:81:26:54:3B:EE:96
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583DAD7A6AADC17B328F223FCB00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/35a88d5f-7178-3122-a82e-37bfcb2d50d2.roa
Signing time:             Sat 23 Apr 2022 12:00:00 +0000
ROA not before:           Sat 23 Apr 2022 12:00:00 +0000
ROA not after:            Mon 24 Apr 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ad:7a:6a:ad:c1:7b:32:8f:22:3f:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Apr 23 12:00:00 2022 GMT
            Not After : Apr 24 04:00:00 2023 GMT
        Subject: CN=3cf04d9f-b33d-4867-8ad6-52800d0a9821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:a2:90:da:af:2a:1a:cd:15:50:b2:6d:2a:
                    cb:79:7c:4d:7b:69:ee:ff:13:a3:5a:28:c5:95:e7:
                    12:ac:c2:30:28:eb:1e:f9:84:6f:9f:3f:81:2a:6c:
                    1e:dc:9e:97:52:b4:57:bb:7c:bc:d6:21:0c:ee:8b:
                    51:dc:52:45:f5:6e:9d:4c:b3:cc:de:22:23:d3:83:
                    1c:4c:93:fb:b4:cc:84:d3:bb:78:4f:3a:5a:65:2e:
                    eb:d3:cb:55:bc:e8:03:41:56:1c:3e:f5:05:30:c8:
                    df:fa:c4:90:d3:34:d0:2d:d6:f3:db:39:5f:b2:98:
                    e5:7e:45:b6:c9:a6:6c:ed:b4:29:23:f7:6c:ee:ae:
                    da:96:bc:d0:c4:64:75:00:56:de:d4:06:7d:34:89:
                    de:27:b8:ef:ad:52:2b:2a:2d:9b:42:82:c6:03:08:
                    f8:2e:8c:01:6f:5e:99:db:e7:33:dc:70:87:3a:59:
                    da:24:f3:18:bd:e7:fc:08:ec:cf:53:c7:87:e6:9c:
                    84:64:cb:b7:74:16:f5:29:38:a1:fd:31:5b:b4:71:
                    c3:4e:7a:dc:c9:a0:e4:75:69:8e:4b:bb:c1:0c:cb:
                    9d:93:7a:5f:a2:21:dd:05:d6:f7:f9:f7:c2:60:b9:
                    77:ae:d4:7e:6d:44:ec:b5:8e:35:0f:8b:7b:7d:77:
                    8b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1B:77:97:D7:89:12:BE:B4:AD:B2:25:D0:1E:81:26:54:3B:EE:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/35a88d5f-7178-3122-a82e-37bfcb2d50d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:91:1b:91:31:1c:b1:9d:de:e2:49:34:c5:64:dc:bb:44:fb:
         7c:e2:1d:57:6d:ec:51:5f:66:90:43:10:ee:11:1f:4c:66:3e:
         ee:77:69:df:6c:58:33:b6:60:6a:46:ed:a3:03:8e:95:96:8e:
         c5:a7:11:75:d4:d9:07:36:d6:25:07:b4:7a:a3:78:48:0b:4c:
         8b:23:a1:90:ce:1f:85:d3:a8:66:ca:8f:13:13:70:1c:a9:dc:
         d5:05:c4:b9:c6:7b:20:f1:7d:cd:9e:74:eb:3c:46:44:0d:4b:
         04:5a:fd:d6:06:30:ac:a4:3b:c9:8f:21:25:53:44:d0:fb:63:
         d7:3b:17:18:67:b0:39:49:27:26:48:b7:00:2b:95:c0:ad:a3:
         c5:cc:b3:11:33:35:3d:cd:2e:eb:13:33:88:cb:12:fb:1e:80:
         19:8f:80:64:ef:e4:32:c8:63:b9:4c:eb:7d:c9:bd:bf:06:19:
         de:fb:3f:f0:fb:44:b1:0f:2c:87:c4:ef:d5:db:b2:87:73:92:
         4a:08:67:7a:4d:81:bd:d6:ab:14:5c:f8:1c:a0:13:68:11:ee:
         cc:bf:ea:06:af:c5:db:02:6c:b4:31:44:f4:d4:3b:64:51:fb:
         3a:4b:5c:16:ec:31:91:cd:bf:f4:8b:b1:9e:7e:49:11:43:38:
         f7:04:02:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----