Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          YqbH22nn0iVxlEKqg+F3PDKg3uIu9b1RVg/eOkssue8=
Subject key identifier:   C7:24:AD:11:10:6A:92:B7:F3:66:1B:7A:55:B8:9E:39:54:5A:28:C8
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       3E08314980C39179A27F47A3E878F4C5179EF0D5
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS174.roa
Signing time:             Wed 24 Jul 2024 20:45:50 +0000
ROA not before:           Wed 24 Jul 2024 20:40:50 +0000
ROA not after:            Wed 23 Jul 2025 20:45:50 +0000
asID:                     174
IP address blocks:        204.93.149.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:08:31:49:80:c3:91:79:a2:7f:47:a3:e8:78:f4:c5:17:9e:f0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jul 24 20:40:50 2024 GMT
            Not After : Jul 23 20:45:50 2025 GMT
        Subject: CN=C724AD11106A92B7F3661B7A55B89E39545A28C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:07:76:bb:ce:bf:33:10:4b:1d:b9:1a:76:09:
                    6e:a2:f4:09:99:5a:05:5f:3c:60:47:61:02:d1:d2:
                    59:bd:c3:3b:e7:96:54:09:24:90:71:79:0a:1a:fa:
                    f8:80:e6:69:20:f1:bd:f7:1f:6e:14:3b:46:2f:c2:
                    10:c5:94:ed:26:b0:f3:e2:4a:53:8e:56:cb:0b:e5:
                    79:f6:1b:1f:8b:d1:b9:59:75:f5:a0:ed:6e:ef:3a:
                    2c:40:a7:33:39:5f:d7:8f:ff:82:86:6e:8a:19:7a:
                    68:ba:36:b0:fe:db:7d:5c:de:0b:d6:d6:37:7d:31:
                    5f:18:cb:e5:1b:d7:ca:fd:45:55:3f:10:36:51:c7:
                    83:1b:64:4b:3b:e7:f2:32:d6:a5:5d:80:4d:0d:43:
                    60:fe:31:4e:61:e4:f2:f1:69:82:ff:68:94:19:bb:
                    01:67:98:ee:81:a0:02:6b:30:5e:95:82:a7:4e:e3:
                    1e:03:a3:36:23:24:d2:8e:67:34:83:3d:c9:fb:8b:
                    5f:57:e1:ec:44:1c:dc:e0:3b:53:35:c7:ac:81:86:
                    8e:fa:9f:d4:d8:b8:46:d1:2b:25:5d:ac:e9:4e:55:
                    2a:59:8d:26:f6:0b:65:c8:08:41:27:57:2a:0b:ea:
                    43:37:8d:3f:0e:8e:51:21:1e:7c:27:b9:37:f7:2d:
                    60:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:24:AD:11:10:6A:92:B7:F3:66:1B:7A:55:B8:9E:39:54:5A:28:C8
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:33:a6:ba:d1:71:98:d3:0b:8b:fd:d5:1c:1e:31:dd:a2:d2:
         13:0a:ae:48:89:5d:2e:b3:6c:bb:0e:cf:bb:ad:11:d3:08:60:
         d2:e1:7f:c2:76:aa:43:9c:8a:80:72:74:fc:ee:aa:55:74:02:
         c3:19:8c:c5:09:d8:aa:7b:ec:18:c0:32:02:74:37:f6:50:fa:
         5e:98:13:81:15:d7:ad:31:03:e5:7b:eb:b2:3f:75:b7:22:12:
         af:95:7b:44:9d:26:3b:de:8f:31:e3:36:61:fa:54:ca:09:ac:
         64:7f:21:b9:a6:28:39:f8:3a:97:60:1f:62:9b:52:6c:1b:55:
         04:58:97:a9:cf:1a:67:fd:52:cb:93:de:e0:37:01:9b:cd:3c:
         73:c9:c2:a4:f4:71:df:cf:63:76:73:3d:ce:ba:09:fd:51:b1:
         46:69:26:00:41:17:76:cb:17:b7:c5:79:98:06:a1:ba:53:07:
         d4:fc:0b:4e:53:14:5b:00:08:45:f9:34:96:fc:29:b0:b3:b9:
         c9:a6:a8:73:82:46:17:f4:83:29:e4:a3:40:29:63:6b:10:fb:
         70:d0:9f:6c:6d:e8:5a:66:48:70:ea:4b:08:f9:79:dd:35:7b:
         d6:1f:4e:fa:a6:d9:4a:ee:ec:55:34:75:a2:6e:a8:cb:82:e0:
         b3:83:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----