Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/69fc39ca-786a-3cff-8690-1a0635c01c92.roa
File:                     69fc39ca-786a-3cff-8690-1a0635c01c92.roa (raw, json)
Hash identifier:          n8DON3sA1TG/bg6PCA1w1CvRtIICoWqceEk0kqJSNZI=
Subject key identifier:   C6:19:52:68:05:36:03:1B:6C:70:D2:3F:AF:E7:6B:71:BC:F5:08:9C
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583F01D6BF832829E1583D721100
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/69fc39ca-786a-3cff-8690-1a0635c01c92.roa
Signing time:             Tue 23 Aug 2022 12:00:00 +0000
ROA not before:           Tue 23 Aug 2022 12:00:00 +0000
ROA not after:            Thu 24 Aug 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:01:d6:bf:83:28:29:e1:58:3d:72:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Aug 23 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2023 GMT
        Subject: CN=1424d6c0-7a66-45fb-ab62-6da2728d5d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9d:de:d9:a0:1a:d9:46:ad:fb:98:5b:7a:36:
                    d0:57:56:cd:ae:9c:14:a7:05:ca:1a:f7:94:49:80:
                    fb:2c:5d:a7:dd:23:1d:9c:cc:94:4a:aa:a9:72:c6:
                    f5:7b:9d:13:52:db:1f:ea:9f:e6:8c:1c:56:26:4b:
                    6f:66:5f:30:a5:47:1c:4a:d0:4e:44:80:00:97:00:
                    03:9e:cd:1d:68:3a:96:cb:c7:62:e3:6f:78:10:cd:
                    0c:a3:a9:95:93:76:a0:8f:a1:3b:7e:3d:f0:99:a3:
                    a9:f9:57:b6:59:47:46:f9:8a:81:b0:9f:be:55:0d:
                    e7:58:ed:b5:e4:72:78:5f:6f:2d:35:c4:dd:c3:50:
                    37:75:5b:b8:f3:e6:d0:dd:f3:fe:e6:7b:c6:f2:e6:
                    1a:5e:57:59:6c:81:51:9f:88:ac:da:e9:b0:65:57:
                    da:77:05:90:27:69:6c:d8:66:a4:d2:53:f8:27:30:
                    25:37:dc:a8:7b:dc:0a:4b:39:6b:26:c6:b8:3d:06:
                    7c:6c:c9:20:79:ba:73:84:cf:8b:ce:98:b3:70:83:
                    8f:d4:db:38:5f:fa:b4:1c:00:1c:db:3b:8f:32:5f:
                    d1:25:f3:23:6b:56:76:e1:34:91:89:f6:47:47:23:
                    8a:85:df:9d:53:dd:e7:74:84:cc:73:ad:7a:3a:3a:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:19:52:68:05:36:03:1B:6C:70:D2:3F:AF:E7:6B:71:BC:F5:08:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/69fc39ca-786a-3cff-8690-1a0635c01c92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c7:d2:20:58:4a:f5:d1:f0:40:58:73:7a:9d:cd:5b:e2:a1:
         c0:2d:f4:49:07:f3:8e:a0:4a:0f:ee:97:47:48:c3:d4:26:97:
         fb:ed:73:15:bc:32:38:6a:ee:f2:0e:4c:70:85:a1:94:c1:3d:
         29:aa:17:4d:a1:e8:83:a2:a8:70:2d:55:24:e4:58:8f:51:53:
         c8:04:04:f0:ec:91:73:d3:b1:a8:0d:59:df:8c:9b:c3:7d:f1:
         dc:7c:b6:7b:7f:3c:f9:b6:4c:fd:22:b8:c3:bc:7c:59:ff:a9:
         c0:11:69:44:05:a3:50:f3:2c:79:65:da:37:ad:9d:8c:26:7f:
         68:05:08:ba:4b:e2:e8:98:79:11:3f:9c:3d:21:10:a7:52:09:
         ae:93:0d:29:bb:64:e8:8c:e5:0e:bc:e3:54:45:fe:c0:9c:4a:
         4d:7b:6b:e3:6f:a1:7c:cf:8e:70:72:af:d0:27:da:1d:7b:f6:
         a7:5d:32:44:90:0b:c1:80:df:e7:0a:76:5d:3b:a5:a0:9e:cc:
         c1:47:f4:65:56:59:2c:5d:5e:b4:e9:dc:ca:08:24:5b:b8:e7:
         ca:28:db:df:35:cf:ad:66:74:31:54:b3:9c:b4:b1:c1:5e:e2:
         d4:67:84:af:da:b3:6d:17:04:69:74:6e:87:7d:49:23:f0:99:
         21:af:3f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----