Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS20454.roa
File:                     AS20454.roa (raw, json)
Hash identifier:          WAKWnw74Qs2ETqylDubOuqm7+2TZOK1pu1QZWy2leOk=
Subject key identifier:   E8:3F:49:14:7C:62:5E:58:A5:5B:82:47:4F:D6:B5:76:D9:93:10:35
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       6EA8925C0A29C6BA4D01CEC6AB3C0CE8526C88FA
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS20454.roa
Signing time:             Thu 07 Nov 2024 09:19:36 +0000
ROA not before:           Thu 07 Nov 2024 09:14:36 +0000
ROA not after:            Thu 06 Nov 2025 09:19:36 +0000
asID:                     20454
IP address blocks:        66.225.227.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a8:92:5c:0a:29:c6:ba:4d:01:ce:c6:ab:3c:0c:e8:52:6c:88:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Nov  7 09:14:36 2024 GMT
            Not After : Nov  6 09:19:36 2025 GMT
        Subject: CN=E83F49147C625E58A55B82474FD6B576D9931035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:49:c4:a0:55:69:3d:83:cd:db:b6:b9:90:
                    46:22:6e:e3:95:b9:ff:60:a0:81:36:14:fe:4a:16:
                    a9:f0:91:4d:d0:d0:b3:bb:21:05:60:a3:fc:56:07:
                    80:20:94:42:df:ad:c6:61:6e:0e:b4:7a:82:12:9e:
                    12:05:ee:85:dd:b5:65:d0:66:a1:b3:9d:e6:12:22:
                    f7:69:98:78:3b:0f:62:96:4a:c8:34:b5:fe:a8:f5:
                    7d:5b:6c:03:59:df:3a:64:42:20:42:a6:36:15:ff:
                    3d:7a:45:f6:21:7d:41:35:aa:b2:59:30:38:c1:ea:
                    c8:ef:39:c2:9d:ee:b4:36:6b:ca:6f:23:55:bb:a1:
                    39:97:f4:d9:a4:77:af:f2:63:a2:bf:6f:05:16:a8:
                    ab:92:65:15:66:fa:75:7b:f9:e6:ed:80:ea:6b:ec:
                    f5:b1:47:df:da:18:6a:8c:4d:71:e7:98:ff:d8:68:
                    35:0c:f5:87:0e:97:74:3e:6c:15:46:12:3e:d0:e5:
                    32:41:47:16:62:ea:e0:50:9d:47:3c:3b:cb:82:ee:
                    b1:35:36:1f:1e:f6:b1:e4:2d:a6:d5:a9:39:fc:69:
                    8c:3b:29:45:f7:38:97:07:d0:e1:2a:25:f5:d8:7d:
                    c7:4a:e8:4a:39:c1:fc:30:9f:a0:71:36:a9:41:c8:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3F:49:14:7C:62:5E:58:A5:5B:82:47:4F:D6:B5:76:D9:93:10:35
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS20454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:fd:fc:3e:06:92:4f:bb:9c:96:89:ee:42:e9:ff:e0:52:97:
         93:7f:9c:b8:84:f9:a3:33:fd:74:ca:60:ee:c3:b0:36:d6:d8:
         c5:18:4e:99:63:0a:fa:b8:b7:6b:bc:15:f5:04:b8:65:b4:10:
         f3:0d:c4:55:a4:d0:f3:84:71:0e:63:3e:e3:dd:d1:78:a2:80:
         f1:aa:2a:47:ee:38:58:ee:53:ec:eb:29:8d:9b:00:c1:83:d7:
         f9:d1:42:55:8b:48:a8:2f:61:0a:67:c0:62:97:ef:6d:63:dc:
         87:e3:40:12:c9:66:53:2b:40:94:95:77:cd:01:4e:f8:6c:ad:
         84:b8:6a:7e:d8:27:5c:a4:79:31:99:7d:bb:85:98:14:c2:3e:
         dc:2f:ff:c6:3a:60:bf:d1:cb:7e:71:08:bf:61:eb:d2:34:bb:
         0c:3e:59:e9:4f:d8:54:cc:56:e4:6a:29:b6:98:9e:e4:d4:08:
         b9:a7:0b:9c:b0:f8:fe:ea:7c:f8:be:4d:40:19:5f:c0:bf:18:
         20:53:aa:e8:7c:b2:8b:98:5b:0b:c0:c7:1c:58:62:2a:d6:ea:
         31:fa:a0:ae:6c:96:21:60:98:28:df:92:1a:cc:23:e1:55:7e:
         a7:19:db:16:30:69:2c:73:7f:61:2d:23:62:5a:32:5a:e3:aa:
         1b:be:07:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----