Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS61317.roa
File:                     AS61317.roa (raw, json)
Hash identifier:          BHK9t2dz34X3aOxQDlWqSgaM8IYB1UgGqF4QcUxrQ0I=
Subject key identifier:   74:9D:63:16:0F:40:1A:59:2F:5A:B1:54:2D:84:41:59:CB:DE:99:BA
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       764ABBE2662E4422B3F09286258D996D4F6ADC09
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS61317.roa
Signing time:             Thu 08 Aug 2024 00:48:59 +0000
ROA not before:           Thu 08 Aug 2024 00:43:59 +0000
ROA not after:            Thu 07 Aug 2025 00:48:59 +0000
asID:                     61317
IP address blocks:        205.234.189.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4a:bb:e2:66:2e:44:22:b3:f0:92:86:25:8d:99:6d:4f:6a:dc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Aug  8 00:43:59 2024 GMT
            Not After : Aug  7 00:48:59 2025 GMT
        Subject: CN=749D63160F401A592F5AB1542D844159CBDE99BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:49:4d:eb:4b:81:95:06:fe:0f:e1:43:0d:
                    d0:b0:6d:f5:4e:80:3a:40:fb:81:ff:97:12:52:0e:
                    80:7b:4e:2d:4c:d9:1b:0f:09:ab:22:c4:36:9c:01:
                    28:d1:8b:83:fa:86:46:55:f7:69:bb:65:31:e2:9d:
                    55:21:40:65:74:41:ea:51:05:42:d5:b3:dd:93:2c:
                    a4:d3:1c:70:1e:bb:42:c1:a8:e3:47:49:69:cf:56:
                    f1:fc:3d:2a:f3:80:c0:97:1e:64:ac:77:55:3c:e5:
                    87:3c:d4:2b:ab:28:f7:dd:5e:a2:8f:84:ee:f3:7f:
                    62:95:e8:54:04:c6:9f:85:c3:be:1c:45:79:14:67:
                    88:8d:e5:94:b9:f7:4e:b8:06:58:f5:43:74:cc:13:
                    86:13:ed:4b:e2:e2:ac:ce:3f:c8:08:10:d0:6c:d1:
                    20:61:1b:9a:c9:5c:90:05:64:89:dc:1c:69:65:15:
                    af:4e:80:b0:ed:73:a8:cc:d8:e1:cd:e8:f1:98:61:
                    90:31:1c:0f:65:a2:1a:9b:ce:18:6e:b5:8e:da:63:
                    e0:14:43:0c:04:09:c9:e8:31:a5:b9:40:01:98:66:
                    ce:0f:cc:f5:a9:4d:7e:9a:11:87:e0:84:42:7f:77:
                    fe:5c:f4:c3:e0:36:7f:14:1d:6f:b1:5d:47:5a:25:
                    1e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9D:63:16:0F:40:1A:59:2F:5A:B1:54:2D:84:41:59:CB:DE:99:BA
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS61317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:87:e7:d0:8c:0c:9f:c1:69:d2:5a:1c:d6:5e:50:98:01:1c:
         68:1d:80:62:12:09:c2:4c:67:3f:3b:5e:5d:36:92:26:ef:e5:
         5f:1c:84:de:8a:62:dc:c6:9e:c9:c5:9c:e0:9e:6b:f1:5d:fb:
         b6:48:94:aa:10:99:ac:0c:92:0e:b1:c6:5e:5e:78:9f:51:45:
         32:d1:b6:a9:d0:d9:30:ec:d7:96:0e:ed:0a:73:3c:fd:b1:f7:
         9d:77:18:6b:72:29:f0:fa:67:38:c2:d2:69:d0:f2:de:2f:ae:
         58:6b:1a:03:90:b1:e3:ed:ad:e5:ce:85:ff:d9:bc:31:39:9e:
         00:51:7e:b4:c9:80:f1:58:fe:fd:c4:1e:67:9c:39:e4:2f:71:
         8f:34:66:0b:cd:22:4a:02:24:35:8c:3f:33:35:b1:9b:21:fe:
         7b:86:d9:55:35:5e:c3:d4:aa:93:d3:0a:2b:39:ea:a7:4f:9f:
         72:36:0a:19:17:5c:a6:20:d6:99:b8:cc:3d:20:82:9a:3c:5d:
         3b:56:04:97:80:3f:fa:ea:e3:8b:da:6c:0d:a4:5b:78:79:bb:
         15:17:d6:8d:5c:d2:8e:8c:fc:ba:e0:fe:42:7d:0d:ee:bc:21:
         48:96:c9:9f:bd:6f:50:9c:24:14:d0:4c:66:df:06:af:7e:fe:
         1b:09:b4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----