Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9477d40e-9cc6-31aa-b7a2-ef067afd6c4a.roa
File:                     9477d40e-9cc6-31aa-b7a2-ef067afd6c4a.roa (raw, json)
Hash identifier:          /GrqziM3FNlvxqn3CV64PPLh4++NyYEwbSbQC3xJ5m8=
Subject key identifier:   25:0C:85:1E:BF:31:63:F4:A1:78:67:13:57:2D:E2:5F:FE:E9:01:06
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583FFFA9B1A9AD5282B14A3C7800
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9477d40e-9cc6-31aa-b7a2-ef067afd6c4a.roa
Signing time:             Tue 22 Nov 2022 12:00:00 +0000
ROA not before:           Tue 22 Nov 2022 12:00:00 +0000
ROA not after:            Thu 23 Nov 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:ff:a9:b1:a9:ad:52:82:b1:4a:3c:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Nov 22 12:00:00 2022 GMT
            Not After : Nov 23 05:00:00 2023 GMT
        Subject: CN=d20eb1b5-79c1-4524-aea1-2534acabd6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fa:e5:8c:f2:f5:fc:26:da:38:23:3f:84:ae:
                    8c:94:17:ea:8c:f6:9b:2a:f2:29:7f:54:0c:5e:cb:
                    e8:b8:6c:17:6a:33:09:24:ae:4b:bd:18:bd:5a:65:
                    2e:09:11:ba:88:f6:d4:a8:d9:0c:71:41:2d:5a:5b:
                    49:21:86:44:4c:11:79:09:59:6f:2f:5f:0a:fd:3b:
                    db:8a:b5:86:40:8f:3f:66:f7:f5:44:fd:b3:7e:b5:
                    96:bb:80:a8:e4:ea:e9:8a:39:cc:49:98:6b:52:79:
                    69:f7:3c:8d:19:10:e4:f6:14:e6:e1:6f:4f:19:77:
                    9f:b7:f1:68:c8:c4:ad:e7:14:41:f0:e8:1f:07:f7:
                    03:4c:e2:be:17:ac:26:cd:b7:94:68:40:d1:08:5b:
                    cc:db:ef:a9:c7:1c:bf:31:85:ec:84:bb:70:2e:40:
                    38:1d:d7:c5:27:43:af:0d:ff:39:b1:3f:64:4d:ca:
                    27:02:e0:fa:99:1d:00:8c:77:db:67:14:ac:58:f3:
                    87:7a:0a:27:0c:67:58:0d:4c:ef:97:2b:56:02:04:
                    b8:24:ae:d3:76:62:ae:c3:e5:30:b4:52:52:e0:e9:
                    47:e0:5d:60:9f:3e:e2:65:42:0f:75:94:ba:59:f0:
                    1b:9e:de:04:9d:4c:8a:7e:e9:00:cf:04:18:02:80:
                    37:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0C:85:1E:BF:31:63:F4:A1:78:67:13:57:2D:E2:5F:FE:E9:01:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9477d40e-9cc6-31aa-b7a2-ef067afd6c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:28:dd:00:ca:db:42:ce:86:f0:62:43:46:6d:7a:0f:a6:8a:
         5f:75:fa:55:6e:4b:dd:a3:c2:c9:ad:e9:82:a0:21:13:fe:b4:
         f6:e7:43:ee:e4:e7:0b:8a:38:9f:42:05:94:c8:ec:b8:42:10:
         77:1b:10:dc:69:b8:48:7b:c3:7d:34:9c:f2:98:c5:4c:a2:29:
         7b:b1:96:49:87:7a:ea:1c:7b:9b:b0:47:3e:df:23:fd:f4:79:
         0b:e2:36:6a:0f:f2:29:2e:cd:e4:3e:2e:b4:d5:71:1c:6a:13:
         26:23:ea:be:39:09:b3:97:68:1b:2f:b3:cb:08:75:06:99:fa:
         75:2c:c0:b8:3f:2c:38:6b:fc:d6:a4:d7:e9:17:56:df:7c:25:
         ec:3f:ed:a0:b1:c0:89:45:18:8c:1d:e3:d1:40:c6:c2:ef:48:
         7c:55:ef:db:23:f7:08:c4:af:bd:b8:be:f3:54:a6:d7:e9:91:
         81:e7:02:20:f1:d4:ec:91:b3:68:fe:1c:f5:5e:1b:b3:04:0c:
         ff:92:c6:28:57:55:60:6e:2c:e4:d5:5b:67:3c:bc:63:f0:ba:
         88:1d:08:d1:32:01:46:ee:b2:82:d4:d4:b4:2b:66:1d:81:79:
         0b:00:4d:5b:8b:4d:7b:ff:12:25:1a:5b:e4:ec:05:38:0c:2e:
         b7:0b:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----