Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3f6aae24-62fc-3825-b3a6-089ab1d15f30.roa
File:                     3f6aae24-62fc-3825-b3a6-089ab1d15f30.roa (raw, json)
Hash identifier:          7uwWTTcIk1bCgsUU41i3djsSvvf0HxiVwlpP8MLVXy8=
Subject key identifier:   14:58:26:05:94:E3:2F:3A:73:49:90:FB:CF:35:AE:70:AC:39:87:83
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583FF1A4CEF712E62501EAB91D80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3f6aae24-62fc-3825-b3a6-089ab1d15f30.roa
Signing time:             Thu 17 Nov 2022 12:00:00 +0000
ROA not before:           Thu 17 Nov 2022 12:00:00 +0000
ROA not after:            Sat 18 Nov 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f1:a4:ce:f7:12:e6:25:01:ea:b9:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Nov 17 12:00:00 2022 GMT
            Not After : Nov 18 05:00:00 2023 GMT
        Subject: CN=312fd77a-5502-46fc-8bc8-aee720bb2d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:95:c1:f7:0f:6b:84:26:3b:57:cb:6d:75:07:
                    3a:b6:22:26:57:4a:30:7d:de:03:c0:56:fa:32:89:
                    c4:39:9c:82:63:03:49:2c:7d:5d:62:9c:4d:58:e5:
                    70:f6:d5:95:a6:48:18:34:13:a4:fb:c6:32:56:4a:
                    20:ed:79:9a:5c:34:7a:4c:52:c5:8b:36:e4:c5:19:
                    eb:79:0c:af:72:60:31:59:0d:2b:c5:5f:51:72:fa:
                    47:3e:85:bf:03:fb:f5:e9:be:a2:7a:af:1f:05:c9:
                    b2:a7:a7:2d:8f:f5:20:c1:64:73:72:ce:51:16:59:
                    63:0d:61:0c:25:e3:29:34:d4:1e:50:74:ab:57:6c:
                    51:e8:c8:f8:13:d6:e8:74:62:24:f9:08:7a:ad:85:
                    f1:8e:57:74:89:1a:a5:bd:a6:64:31:5a:56:30:cf:
                    ac:b8:5a:17:0d:22:55:50:2a:ed:34:f6:56:05:ea:
                    c3:33:56:65:4c:ec:5c:8b:2e:a1:d2:d5:05:08:2b:
                    57:1c:85:2c:20:01:68:33:cb:cb:ab:56:cf:2f:e6:
                    3c:18:88:5a:7b:91:b5:13:07:7a:36:12:83:d6:ef:
                    3c:bf:16:2a:07:2d:36:13:84:e1:0c:5a:82:a9:51:
                    3b:13:90:24:53:4c:fb:fb:06:25:12:43:8f:e4:07:
                    5a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:58:26:05:94:E3:2F:3A:73:49:90:FB:CF:35:AE:70:AC:39:87:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3f6aae24-62fc-3825-b3a6-089ab1d15f30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:dc:f0:7e:dd:14:42:24:0c:e0:69:54:d4:0a:d9:99:a8:9f:
         58:3f:c5:3c:51:0b:eb:6e:8c:b6:38:9e:a6:2b:c5:4f:7c:16:
         12:d3:80:17:c4:d0:90:4e:4b:c9:08:5f:b6:8f:8b:50:d5:2f:
         b2:d2:92:0d:95:d9:71:0d:c8:1e:5b:55:5c:79:c1:19:65:9c:
         01:69:5e:54:1d:bf:7e:de:2b:6f:90:c7:3c:2f:f6:cd:8f:84:
         d7:3d:31:66:40:34:98:43:6a:1c:8b:03:b8:71:d9:99:71:0f:
         d8:69:89:16:be:ed:ff:c5:e2:1d:76:0a:e4:bd:bb:82:56:1e:
         03:e2:a6:b0:ea:78:2f:7b:db:ed:a5:1e:a9:41:15:07:6f:e6:
         6f:1b:ad:06:73:46:0e:a2:c1:2a:9a:39:70:33:29:cf:17:99:
         64:e5:e5:fa:e6:22:aa:25:5c:a7:3f:25:e4:e6:3a:c2:e1:0e:
         db:87:cf:6d:3a:cf:6a:aa:f9:46:94:5f:f6:2b:7e:4a:ce:13:
         07:f8:fe:f5:41:e9:fe:03:e4:8a:3e:0a:4a:fc:ae:b7:d8:e0:
         e4:ef:6f:2f:81:75:bc:db:9d:a4:46:b1:45:93:99:e4:e5:db:
         6d:f7:53:d2:70:d7:63:b0:51:2d:44:e0:35:de:40:f2:44:44:
         10:c0:65:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----