Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS46844.roa
File:                     AS46844.roa (raw, json)
Hash identifier:          Elf2DbFTCy/RlpJg2HrvCH/FFfIY+Q+9+ofZFNbx6/E=
Subject key identifier:   2F:59:6E:AB:0F:CF:0E:FE:DB:73:47:11:11:36:49:04:DD:F5:E6:16
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       3C2051895A2D85CADC49A15AFE3B02BF16BBF6D7
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS46844.roa
Signing time:             Thu 22 Aug 2024 11:48:59 +0000
ROA not before:           Thu 22 Aug 2024 11:43:59 +0000
ROA not after:            Thu 21 Aug 2025 11:48:59 +0000
asID:                     46844
IP address blocks:        205.234.177.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:20:51:89:5a:2d:85:ca:dc:49:a1:5a:fe:3b:02:bf:16:bb:f6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Aug 22 11:43:59 2024 GMT
            Not After : Aug 21 11:48:59 2025 GMT
        Subject: CN=2F596EAB0FCF0EFEDB73471111364904DDF5E616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:74:5e:19:d7:4d:68:13:81:b7:05:fb:4d:50:
                    92:cd:cd:ea:cd:e4:a3:91:9b:bb:65:8c:03:2e:d3:
                    e1:9c:6f:70:f6:66:4d:61:86:58:5b:d5:ee:a5:52:
                    fd:e7:c5:91:9f:d4:74:ba:5f:4e:9c:02:e9:11:52:
                    7e:fc:a8:6a:c3:65:dc:e9:27:65:a0:e9:bb:04:00:
                    ca:e2:e3:f5:db:5d:30:57:b5:9d:dd:a4:21:22:fb:
                    c9:22:6a:09:1d:39:e9:cb:33:02:53:55:78:49:10:
                    72:d4:79:b5:0f:db:2f:61:9b:67:fe:11:b8:7d:f7:
                    88:d7:f5:46:bb:80:79:41:c2:09:d3:75:b5:ad:d4:
                    a7:46:7c:85:89:d2:db:95:21:60:34:b2:19:cc:9d:
                    11:d8:03:4f:fe:44:4d:aa:4b:bd:77:0b:e9:0b:22:
                    4d:43:b9:6d:2d:82:bd:51:11:cf:ec:7f:7d:55:b0:
                    83:1c:ef:a6:d0:dc:8d:d4:90:30:6e:17:16:eb:e9:
                    0b:c6:45:6d:55:8f:17:f9:03:87:25:9d:33:02:d9:
                    4e:f7:ee:02:a2:6c:3f:a8:e5:c7:d2:53:cc:5b:81:
                    23:17:a8:69:a2:5e:df:30:8c:96:20:9c:aa:e9:e2:
                    14:00:2b:6c:43:cb:1f:bc:8f:6b:97:ed:b1:c8:c2:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:59:6E:AB:0F:CF:0E:FE:DB:73:47:11:11:36:49:04:DD:F5:E6:16
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS46844.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:c9:cb:1c:c2:8a:ac:ea:14:68:dc:ec:c1:bb:6f:65:3d:fc:
         84:17:b8:45:3d:32:6e:48:ed:ca:cf:93:38:0e:b6:f8:6c:6f:
         be:d4:3c:5a:e4:59:2f:6f:e4:fc:8c:fe:ca:2f:a5:a7:1a:bc:
         18:50:a7:92:49:7c:50:ca:8e:69:8b:03:af:3e:b2:14:b2:24:
         26:dc:d6:49:e7:b1:5f:7f:f1:dd:87:cc:c1:54:4e:7f:c5:0e:
         a8:b1:96:43:c9:59:46:dc:89:43:36:83:ce:fb:bc:b5:18:ed:
         36:2d:d7:22:84:a6:0b:07:98:95:59:45:9f:db:38:25:8f:b2:
         d5:24:dc:fb:2c:c0:6a:0f:16:7f:35:3a:cd:44:4d:d0:83:3c:
         8d:7d:bb:f8:ce:a1:bc:d9:5d:62:3a:18:5e:11:42:6e:e1:e4:
         04:f4:36:66:51:d2:f6:23:5c:19:23:33:c8:62:5d:33:5c:cb:
         8c:e4:1d:d6:b2:d9:37:9b:82:b1:72:94:6b:28:c4:04:39:f3:
         3f:92:34:36:79:e3:29:f7:89:28:cc:5c:d0:60:1f:c7:82:8a:
         55:a1:59:d8:93:95:41:33:58:77:be:24:fa:8a:43:c9:95:79:
         ba:ce:01:b6:39:bd:35:c3:93:99:35:c8:e9:7f:b4:a4:53:cf:
         74:9c:9e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----