Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS30094.roa
File:                     AS30094.roa (raw, json)
Hash identifier:          qggO1LOMJLifLNBVmXYJquMvN7x1DKzcvF0W7drRINk=
Subject key identifier:   26:65:2B:09:48:29:45:AE:31:EC:10:10:C4:A8:0A:79:FF:AE:C6:B6
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       60E007ECEE0275820A7C9EE925419D91CB999958
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS30094.roa
Signing time:             Wed 11 Sep 2024 19:48:59 +0000
ROA not before:           Wed 11 Sep 2024 19:43:59 +0000
ROA not after:            Wed 10 Sep 2025 19:48:59 +0000
asID:                     30094
IP address blocks:        205.234.197.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e0:07:ec:ee:02:75:82:0a:7c:9e:e9:25:41:9d:91:cb:99:99:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Sep 11 19:43:59 2024 GMT
            Not After : Sep 10 19:48:59 2025 GMT
        Subject: CN=26652B09482945AE31EC1010C4A80A79FFAEC6B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:f3:e8:9a:e4:7c:30:28:1a:97:a8:90:90:
                    10:f5:4d:07:9c:cd:02:f3:e3:84:69:25:c1:60:43:
                    d1:35:3c:f3:61:78:08:f6:2d:f8:18:0f:69:3e:6a:
                    b4:63:6b:ff:ab:c3:ab:b6:21:e8:fb:0a:8a:bf:f8:
                    d5:ea:ee:b2:96:b3:90:ec:bd:43:4a:e9:ea:c3:62:
                    a8:55:45:5b:8c:c2:e4:a1:6a:38:1b:67:87:0e:d2:
                    3e:3e:00:71:c8:91:4e:22:b5:52:0d:a5:d2:e5:f5:
                    75:cd:26:f4:4c:08:df:0b:e8:1a:69:a8:3a:89:42:
                    dd:97:39:cf:a7:e3:4e:31:2e:90:99:ec:6a:6a:de:
                    ea:68:c8:9a:5a:59:97:69:1e:09:0c:87:8c:33:1c:
                    50:4d:5d:b4:2e:ef:65:78:af:e5:a7:17:97:e0:f1:
                    b4:45:d0:76:a1:5e:af:51:8d:9a:cd:66:3b:d4:78:
                    cc:73:eb:70:4c:a4:0f:9c:44:91:5b:70:fd:28:79:
                    dc:b5:79:8c:6f:ac:26:aa:84:d7:a3:d4:e3:a1:c2:
                    57:9e:4b:31:2e:aa:d2:ad:df:5c:97:7f:28:e5:03:
                    f5:a6:14:60:20:db:68:f3:69:5e:c9:1f:49:7b:bd:
                    70:88:62:7f:50:b2:22:f6:18:4f:e0:d3:41:66:36:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:65:2B:09:48:29:45:AE:31:EC:10:10:C4:A8:0A:79:FF:AE:C6:B6
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS30094.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:a9:cc:5d:e7:dc:6a:18:ca:e1:45:19:64:47:f0:40:88:c0:
         15:88:e9:c8:dc:ad:cd:3b:23:9c:da:1b:a1:7c:59:8a:50:ee:
         21:ca:7e:bb:1a:0e:ff:13:58:df:1d:ee:1b:48:4c:6e:48:2a:
         7b:99:b3:d6:83:3f:32:d7:9a:4d:f4:eb:b2:86:0d:1b:be:5a:
         c6:51:c7:50:3c:46:cd:2c:7e:8e:a5:45:53:1d:ea:33:9e:28:
         6f:53:af:30:f3:7a:46:42:e0:8b:5c:16:7f:8d:35:fc:7d:2f:
         d6:31:70:f7:36:5f:ea:26:5c:c4:1a:47:73:0c:8e:d7:cb:10:
         1d:36:81:88:80:49:d6:9b:72:a2:57:9b:27:db:4a:ae:ee:ce:
         94:f4:6b:c5:56:0f:f4:5d:02:ee:03:42:05:bd:f9:99:0c:e0:
         cd:ba:89:b8:ec:55:8f:e4:a7:98:54:52:19:c7:e8:5f:41:97:
         45:44:71:3a:67:2a:c4:64:92:83:3d:0a:50:95:3d:7e:0f:9e:
         49:28:c0:a7:2c:17:fe:c9:33:2b:15:36:79:f1:63:6c:d7:80:
         f5:46:55:2f:6b:4c:c9:18:97:cc:15:ff:a9:b6:d6:b3:08:05:
         a0:47:52:c4:42:aa:9f:48:eb:62:8c:42:8f:06:e5:b4:10:00:
         6e:4f:79:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----