Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS7029.roa
File:                     AS7029.roa (raw, json)
Hash identifier:          bCUWBsmAksX0t4I3uSe3y3LzjcEgVY6yToePuOLZvuU=
Subject key identifier:   FA:60:15:C4:14:0B:57:8D:DE:0E:57:9E:48:56:D3:83:C1:4C:65:D8
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       54919BFEFE8EF2F0BA6F9C68F9ECA93F00D3B525
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS7029.roa
Signing time:             Wed 24 Jul 2024 20:46:53 +0000
ROA not before:           Wed 24 Jul 2024 20:41:53 +0000
ROA not after:            Wed 23 Jul 2025 20:46:53 +0000
asID:                     7029
IP address blocks:        205.234.176.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:91:9b:fe:fe:8e:f2:f0:ba:6f:9c:68:f9:ec:a9:3f:00:d3:b5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Jul 24 20:41:53 2024 GMT
            Not After : Jul 23 20:46:53 2025 GMT
        Subject: CN=FA6015C4140B578DDE0E579E4856D383C14C65D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:98:9a:5a:54:01:0f:fd:5e:c5:22:a2:d8:
                    4a:5a:55:24:6a:d0:67:67:52:42:ed:36:60:a9:3b:
                    0e:c2:14:b0:0f:29:26:97:5c:22:52:1a:70:e0:40:
                    24:06:28:fe:16:ae:cb:91:06:80:1f:95:94:f2:c5:
                    9b:6b:7a:97:49:d5:cf:db:8e:11:bc:a1:ae:0b:4f:
                    2a:9f:05:94:c4:e5:31:ed:57:4f:45:15:70:6c:81:
                    34:f4:75:b1:30:c7:7e:dc:c4:42:40:99:b0:dc:61:
                    00:6b:71:5b:95:c6:f7:08:1b:09:4b:73:c4:de:b9:
                    a0:71:9b:ef:ff:f9:39:e5:52:7e:1f:29:12:c3:33:
                    66:09:f6:1c:4a:13:b1:3a:d2:74:81:a2:3e:b0:b2:
                    b3:93:c7:44:a1:47:48:5e:95:67:62:27:a9:9b:cf:
                    fc:ef:af:eb:58:fe:20:2d:2a:87:3d:61:29:98:28:
                    9c:05:bb:54:22:96:3c:77:f3:ff:36:f6:6b:07:26:
                    fb:ce:c4:bc:c3:24:a1:7a:43:55:45:a8:d2:a1:57:
                    b4:45:7a:41:f9:a2:4a:a9:a0:51:c5:7b:13:53:10:
                    c7:09:e9:d9:84:08:66:87:66:32:dc:eb:a1:1f:ac:
                    46:8e:aa:e5:03:8c:39:06:43:a7:32:be:17:0d:91:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:60:15:C4:14:0B:57:8D:DE:0E:57:9E:48:56:D3:83:C1:4C:65:D8
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS7029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:bc:1d:3b:6e:2a:91:31:f3:8b:2b:5e:9e:31:c7:9f:a0:af:
         ba:c2:f1:8f:be:a6:eb:7a:c6:4f:41:bf:a2:c3:d0:63:c7:26:
         09:ff:54:4a:cf:ee:63:25:39:5a:dc:ee:14:32:a8:dc:2a:7a:
         4d:3a:16:94:13:39:14:ae:94:ce:3b:a4:41:6a:91:f8:f0:db:
         e1:d4:d8:3e:55:7d:67:ca:56:75:7b:af:fb:bc:93:6c:ed:ed:
         a6:0e:59:4b:2d:33:77:a3:10:51:58:52:16:6d:c5:66:43:a5:
         0b:54:21:38:ff:3d:a1:ba:c0:42:f3:f7:a8:6e:1e:55:f0:bc:
         7f:f5:df:2b:a0:73:4d:05:b7:2e:19:14:dd:e3:2c:7f:ee:76:
         10:0d:60:6f:38:30:eb:ec:e6:d1:10:7d:7f:90:d3:10:67:66:
         42:1c:1c:2e:b3:d9:b1:e5:e7:93:c8:be:09:e4:eb:cc:e8:c4:
         45:3e:3d:db:63:e2:3c:a1:e4:f2:d6:2a:bd:55:b8:b4:a2:bf:
         da:fa:2b:d6:a2:d3:fa:df:00:aa:83:da:e0:d6:97:86:b2:01:
         45:6b:7b:e6:c4:5c:36:57:f6:f3:7f:5e:27:22:f1:97:19:69:
         81:8e:ce:3d:79:91:99:2d:06:48:29:ae:2b:7d:31:8e:7e:42:
         75:f7:61:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----