Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/794e2d46-cefe-3fcf-ae82-459e62841e34.roa
File:                     794e2d46-cefe-3fcf-ae82-459e62841e34.roa (raw, json)
Hash identifier:          4rH1UWN0dvnL6JKFPK0B1pRBR/lwvI4dOAQPTBJLgzw=
Subject key identifier:   A6:E9:90:A5:00:80:93:6D:3B:7C:0F:96:01:6A:19:92:D3:40:DC:ED
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583FB98EB2E455B61B20F9CCDF80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/794e2d46-cefe-3fcf-ae82-459e62841e34.roa
Signing time:             Fri 28 Oct 2022 12:00:00 +0000
ROA not before:           Fri 28 Oct 2022 12:00:00 +0000
ROA not after:            Sun 29 Oct 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:8e:b2:e4:55:b6:1b:20:f9:cc:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Oct 28 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2023 GMT
        Subject: CN=c25c252d-4fed-4748-857c-4b803703eb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4d:8b:f4:e1:5e:32:ca:fb:af:ad:7f:48:66:
                    ec:20:00:c7:fb:51:c1:3a:dd:c0:76:92:ae:86:a8:
                    44:6a:c1:54:81:87:04:e4:c1:bb:e2:1f:62:40:12:
                    9d:bb:67:dd:d4:75:85:bb:c7:63:35:b4:e7:fd:0b:
                    b7:57:b2:96:bf:9c:1a:a0:bb:67:fa:6e:d9:ac:a0:
                    21:35:20:9a:45:3a:66:14:43:8e:d6:28:17:c8:a7:
                    6b:d8:9e:54:d8:49:4d:64:33:bf:9e:55:77:a0:39:
                    b1:97:de:47:d7:bc:67:fe:6f:0a:89:9a:42:ab:40:
                    0f:22:02:01:e2:73:00:7b:8c:f5:0c:65:93:af:de:
                    9e:65:6e:fd:20:a3:cd:f1:6c:53:5f:78:31:52:6c:
                    eb:28:0f:c1:fe:c0:81:5a:40:2e:3f:13:a1:05:e7:
                    43:25:db:60:f3:d2:bd:5d:17:50:1f:ab:5f:67:44:
                    9a:3f:ad:e6:03:1d:98:7c:4d:3e:8f:d5:75:55:84:
                    de:6d:51:da:07:1e:4a:85:64:8e:56:a9:a6:8c:a5:
                    6b:77:8f:84:e3:66:3c:d4:fe:fc:9c:0d:12:67:8a:
                    16:8e:73:0c:e4:8e:58:ef:a0:51:36:bd:bd:22:bf:
                    10:de:d8:6b:1a:48:fd:f4:ec:f3:b5:a4:0b:3a:eb:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E9:90:A5:00:80:93:6D:3B:7C:0F:96:01:6A:19:92:D3:40:DC:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/794e2d46-cefe-3fcf-ae82-459e62841e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d4:e2:ef:56:42:ec:d2:a0:2b:c6:25:2e:6f:ff:87:85:ff:
         4a:1f:7e:92:3b:12:a9:ab:73:1f:56:19:6c:59:b1:5b:ee:dd:
         b1:59:65:4e:77:b7:c0:d3:e0:9e:39:19:e5:ae:37:6e:4d:28:
         ba:2a:89:df:f0:41:4c:0a:6a:f5:63:79:f9:61:30:8b:48:56:
         e8:b5:d8:6f:75:31:2f:90:78:a3:75:c3:23:64:a7:e4:b9:65:
         0d:43:64:dd:e8:da:fb:04:56:87:9f:a8:1e:c4:74:c9:58:64:
         5f:43:35:a6:d6:4b:33:a7:95:cc:59:a6:fa:77:ae:1a:46:48:
         75:ed:0e:05:37:55:33:b1:40:ae:7f:0b:b1:e0:b6:60:32:9c:
         2d:c1:18:5a:fe:d0:0e:9f:2a:cb:51:f7:bf:29:79:a9:e7:90:
         cc:1b:7f:46:8d:5a:0f:33:8e:fe:16:06:1b:0d:dd:b0:df:9d:
         77:9e:9e:6e:c0:c9:bb:cf:62:0b:96:e2:f8:04:e7:bf:a0:f5:
         eb:2a:b4:e5:73:61:db:21:57:00:1f:c2:95:4d:7e:e1:6d:e5:
         09:58:2d:61:b5:26:b7:db:d1:92:de:57:a5:23:f1:c4:bd:23:
         58:cc:cb:8e:33:88:85:6c:08:f1:54:a0:8f:6a:1b:e3:91:06:
         34:76:32:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----