Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/4833ac0a-33c3-44c3-8b1c-938fa7e9a012.roa
File:                     4833ac0a-33c3-44c3-8b1c-938fa7e9a012.roa (raw, json)
Hash identifier:          qUQnXa8XRVbquci2ztHvEzE4kHxOwlUrLs6lBWEO/kY=
Subject key identifier:   AF:45:1C:10:C7:58:48:B2:53:57:CE:F8:6F:67:A4:94:1A:4B:D4:4A
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       40F0BF2FE5AE3FDDBCC60D6C21D619A164153A9A
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/4833ac0a-33c3-44c3-8b1c-938fa7e9a012.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     35916
IP address blocks:        198.211.0.0/18 maxlen: 24
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f0:bf:2f:e5:ae:3f:dd:bc:c6:0d:6c:21:d6:19:a1:64:15:3a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:98:b3:58:97:5d:1f:5f:85:ad:23:86:ea:a2:
                    63:37:b9:fb:65:1b:74:49:3f:3f:76:c4:61:e4:17:
                    c1:18:25:bb:3e:55:fa:fc:a1:1e:0a:99:46:ec:57:
                    b7:1b:4f:57:2f:04:9f:4f:10:fb:ae:a7:0f:16:5a:
                    e6:ff:b7:fa:b9:40:ab:56:60:d3:45:ab:83:a7:6c:
                    67:df:b4:61:f6:57:f7:60:db:b3:fd:dd:ba:25:d8:
                    a3:d1:af:a9:72:b3:6f:5d:cd:df:85:5c:46:c2:7c:
                    45:68:08:62:76:ee:67:5d:0a:2b:e5:89:99:7c:5d:
                    d5:ed:27:dd:dd:08:8d:ff:b6:13:7f:b3:c5:51:d1:
                    61:ab:e7:fd:e9:af:00:86:f7:41:3a:8f:bc:ca:34:
                    1c:1a:ca:8c:c1:a4:18:e9:5d:d7:39:85:9a:0c:6e:
                    f3:e5:a2:3e:3f:c7:84:f4:e9:3b:3e:28:94:0d:e3:
                    a6:5b:ec:bb:70:90:4f:04:c8:8b:0e:c0:99:5a:97:
                    8a:f7:f4:ce:1e:f3:c8:c1:ee:37:a1:da:18:a4:da:
                    18:d3:32:a0:bf:c4:2b:d0:bd:a8:27:fa:02:0c:90:
                    77:1a:d1:44:c7:f6:18:1b:9d:cd:cf:24:4d:6f:b0:
                    e3:a1:9e:44:9f:e4:1e:de:71:8b:d5:bc:47:b9:a9:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:45:1C:10:C7:58:48:B2:53:57:CE:F8:6F:67:A4:94:1A:4B:D4:4A
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/4833ac0a-33c3-44c3-8b1c-938fa7e9a012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.211.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:5f:a1:71:7c:1b:f8:7a:3c:e2:c6:cf:b1:16:bc:36:a8:
         8e:79:a8:32:9d:8d:fa:d2:1e:bb:51:e5:7c:f7:57:af:f4:5f:
         ae:f5:f8:aa:05:ad:98:17:3e:14:6f:72:e9:48:a1:7e:c5:d0:
         12:75:29:0c:10:60:3f:81:b2:74:15:c4:44:73:e6:24:1e:44:
         c9:d5:cb:47:a7:5a:81:ff:27:13:d6:8b:82:7a:83:0e:69:80:
         81:94:83:5c:ba:ee:91:46:4c:d1:02:9d:2c:94:79:55:67:da:
         a7:e9:ac:07:79:34:39:c8:b2:7b:62:b2:a5:c7:62:5c:11:f7:
         5c:d5:fb:2b:57:8f:f1:a4:e0:91:d3:94:9f:48:08:40:02:19:
         4f:d0:0a:41:65:ec:ba:b7:0d:dd:e5:64:36:8f:18:99:27:bc:
         1e:7b:63:37:f4:10:67:ff:51:8b:90:fb:7d:9d:3f:7f:2d:0c:
         5e:51:d4:26:00:29:35:ec:3e:d6:2e:52:0a:87:8d:85:4b:bc:
         52:d1:ce:f7:b6:3a:d7:1a:d7:9a:4f:0c:fb:a5:20:7b:4b:e8:
         ac:4a:2e:7c:99:5d:ec:b1:97:7c:dc:d9:93:72:ad:b1:ff:a4:
         7b:52:b5:d8:d1:88:c2:57:87:ae:61:b5:38:2c:53:e1:0a:14:
         43:c2:8a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----