Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/bb989ff0-3480-46ed-90f5-67c249563105.roa
File:                     bb989ff0-3480-46ed-90f5-67c249563105.roa (raw, json)
Hash identifier:          x+Ysb7mp8eq21PGA6exvOcWEHInlbYCEYaIse9t88Ts=
Subject key identifier:   5F:F0:83:33:99:A7:2D:B7:C4:A9:76:89:CF:89:93:0D:28:9A:E9:CF
Certificate issuer:       /CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
Certificate serial:       500EE012134C317B90A1CD3313531FA2C2EBD609
Authority key identifier: 15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/bb989ff0-3480-46ed-90f5-67c249563105.roa
Signing time:             Mon 22 Apr 2024 00:00:00 +0000
ROA not before:           Mon 22 Apr 2024 00:00:00 +0000
ROA not after:            Mon 27 May 2024 23:59:59 +0000
asID:                     14618
IP address blocks:        173.82.137.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0e:e0:12:13:4c:31:7b:90:a1:cd:33:13:53:1f:a2:c2:eb:d6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107
        Validity
            Not Before: Apr 22 00:00:00 2024 GMT
            Not After : May 27 23:59:59 2024 GMT
        Subject: serialNumber=1f93b66f13a1f42d4e762970ffdd09ed63ea859582e8d1addb9f7d53cde0f8ae, CN=35095e3e-84cb-4ad0-bda1-6c6f8da69f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ff:f4:43:86:ef:79:fd:6d:7a:06:35:7a:3b:
                    83:70:37:27:4d:11:f6:0e:30:42:7f:81:24:4a:03:
                    4b:5d:12:a3:77:a4:04:4f:a8:a5:36:06:0b:71:c4:
                    78:6b:1f:a8:24:38:b2:d8:19:32:11:d3:38:57:3e:
                    0b:93:95:78:6f:f8:d5:d8:5c:9d:1a:1f:d3:a0:5a:
                    24:c0:e1:25:a5:c1:13:8c:66:f9:f8:f3:34:f4:19:
                    81:21:5b:b0:e6:67:7a:ea:2b:ac:6f:47:5a:27:a0:
                    fe:e5:d3:e5:50:2d:43:43:f8:5b:a9:b4:8e:28:e9:
                    0c:a2:bc:5f:b8:e9:fc:f6:52:9c:3b:52:af:6d:47:
                    ec:1a:67:e4:4b:0f:4d:a8:5e:d1:70:6e:c2:b0:a3:
                    a2:be:dd:e4:20:28:bb:fd:3d:15:79:f8:db:f7:ae:
                    5d:27:29:db:19:e8:a8:e0:a6:fc:74:00:68:66:b1:
                    3d:97:3d:b9:be:c9:82:b4:72:05:56:47:c6:b2:c9:
                    83:33:0f:c9:d4:1a:06:67:41:9f:31:40:93:87:70:
                    2a:0a:09:f7:06:45:37:1f:39:21:57:af:ed:88:f3:
                    4f:8d:a2:a1:2a:67:8c:18:cb:32:3c:c4:66:5c:09:
                    fe:97:f2:3f:26:27:ed:1c:96:03:92:20:a1:4c:a9:
                    39:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F0:83:33:99:A7:2D:B7:C4:A9:76:89:CF:89:93:0D:28:9A:E9:CF
            X509v3 Authority Key Identifier:
                keyid:15:F4:EF:04:F5:AF:23:96:C9:5F:16:42:E3:79:07:8B:48:8C:16:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aaa76394-48fc-4ff3-b6aa-0693c55d758f/1b1fe67321cf669f9c2b75369cc0fdd38c163c58b1d42d0107.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/bb989ff0-3480-46ed-90f5-67c249563105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/ff9fa84e-9783-4a0b-a58d-6dc8e2433d33/z2afnCt1NpzA_dOMFjxYsdQtAQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:e9:ce:09:e5:a4:79:bb:b7:cd:34:df:b1:c3:d7:e6:7f:2a:
         e0:5a:72:da:a0:4d:1d:88:ad:3c:b2:89:05:79:7e:f2:7e:06:
         fe:a0:3c:53:a8:45:b1:01:e0:9d:7f:b0:8b:b2:db:5e:dd:6b:
         af:fe:36:f1:c8:cf:37:06:d6:f4:f8:96:7a:14:fa:8a:b6:2d:
         4b:19:9e:6d:02:81:df:bf:21:d4:52:82:12:c3:1d:29:14:3e:
         38:a9:c8:12:c2:dd:c2:cf:29:40:3d:ea:eb:dc:b0:5d:f2:17:
         00:5d:8f:3e:7c:61:88:02:b2:5b:33:67:c1:e3:1a:c2:26:b1:
         0d:9d:eb:37:69:d7:76:dc:e5:60:d4:c0:a2:86:0c:89:04:ab:
         b7:b5:23:ec:30:c2:be:91:d3:73:c2:32:f0:41:04:0d:cd:03:
         7c:04:3a:82:c5:6e:b9:c0:5d:7f:25:fe:11:77:30:79:df:1c:
         d0:bc:c9:f0:20:27:26:2a:d8:03:10:ba:91:31:e6:6f:a5:19:
         87:40:8a:06:d8:01:01:93:61:bd:be:d8:9b:4f:cb:6e:e5:18:
         cc:49:28:d1:7d:9f:4c:db:ba:ad:24:76:97:82:36:f5:3f:d4:
         a0:4b:ba:b2:5e:ad:b8:ce:1e:e8:26:3c:3a:08:d7:db:71:d1:
         8b:df:8d:fb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUA7gEhNMMXuQoc0zE1MfosLr1gkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWIxZmU2NzMyMWNmNjY5ZjljMmI3NTM2OWNjMGZkZDM4
YzE2M2M1OGIxZDQyZDAxMDcwHhcNMjQwNDIyMDAwMDAwWhcNMjQwNTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZjkzYjY2ZjEzYTFmNDJkNGU3NjI5NzBmZmRkMDllZDYz
ZWE4NTk1ODJlOGQxYWRkYjlmN2Q1M2NkZTBmOGFlMS0wKwYDVQQDEyQzNTA5NWUz
ZS04NGNiLTRhZDAtYmRhMS02YzZmOGRhNjlmNjEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCP//RDhu95/W16BjV6O4NwNydNEfYOMEJ/gSRKA0tdEqN3
pARPqKU2BgtxxHhrH6gkOLLYGTIR0zhXPguTlXhv+NXYXJ0aH9OgWiTA4SWlwROM
Zvn48zT0GYEhW7DmZ3rqK6xvR1onoP7l0+VQLUND+FuptI4o6QyivF+46fz2Upw7
Uq9tR+waZ+RLD02oXtFwbsKwo6K+3eQgKLv9PRV5+Nv3rl0nKdsZ6Kjgpvx0AGhm
sT2XPbm+yYK0cgVWR8ayyYMzD8nUGgZnQZ8xQJOHcCoKCfcGRTcfOSFXr+2I80+N
oqEqZ4wYyzI8xGZcCf6X8j8mJ+0clgOSIKFMqTm7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUX/CDM5mnLbfEqXaJz4mTDSia6c8wHwYDVR0jBBgwFoAUFfTvBPWvI5bJ
XxZC43kHi0iMFgswDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWE3NjM5NC00
OGZjLTRmZjMtYjZhYS0wNjkzYzU1ZDc1OGYvMWIxZmU2NzMyMWNmNjY5ZjljMmI3
NTM2OWNjMGZkZDM4YzE2M2M1OGIxZDQyZDAxMDcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZmY5ZmE4NGUtOTc4My00YTBiLWE1OGQtNmRj
OGUyNDMzZDMzL2JiOTg5ZmYwLTM0ODAtNDZlZC05MGY1LTY3YzI0OTU2MzEwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2ZmOWZhODRlLTk3ODMtNGEwYi1hNThk
LTZkYzhlMjQzM2QzMy96MmFmbkN0MU5wekFfZE9NRmp4WXNkUXRBUWMuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACtUokwDQYJKoZIhvcNAQELBQADggEBABDpzgnlpHm7t80037HD1+Z/KuBa
ctqgTR2IrTyyiQV5fvJ+Bv6gPFOoRbEB4J1/sIuy217da6/+NvHIzzcG1vT4lnoU
+oq2LUsZnm0Cgd+/IdRSghLDHSkUPjipyBLC3cLPKUA96uvcsF3yFwBdjz58YYgC
slszZ8HjGsImsQ2d6zdp13bc5WDUwKKGDIkEq7e1I+wwwr6R03PCMvBBBA3NA3wE
OoLFbrnAXX8l/hF3MHnfHNC8yfAgJyYq2AMQupEx5m+lGYdAigbYAQGTYb2+2JtP
y27lGMxJKNF9n0zbuq0kdpeCNvU/1KBLurJerbjOHugmPDoI19tx0Yvfjfs=
-----END CERTIFICATE-----