Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/8e4266c6-bc79-331c-9325-8c08ab040eea.roa
File:                     8e4266c6-bc79-331c-9325-8c08ab040eea.roa (raw, json)
Hash identifier:          ARBLxciB3ih6bRltb2tV09IrMzu9ZAaPDQX3vOFXO8Q=
Subject key identifier:   FF:16:A9:C6:A3:4F:11:A2:38:80:85:B7:6D:B8:9E:4C:82:23:AF:18
Certificate issuer:       /CN=15115143-11c8-4b06-80a1-a991fa50f2fa
Certificate serial:       010D0C9F43285841E46DE33B7986CAF751D3C780
Authority key identifier: 57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/8e4266c6-bc79-331c-9325-8c08ab040eea.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Mon 10 Jul 2023 01:29:09 +0000
asID:                     211535
IP address blocks:        23.133.40.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:e3:3b:79:86:ca:f7:51:d3:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15115143-11c8-4b06-80a1-a991fa50f2fa
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 10 01:29:09 2023 GMT
        Subject: CN=db91cfe7-8a0a-46b3-bd3e-d667e838eff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:8c:0b:87:87:fc:f9:f5:1e:da:ed:38:c7:
                    0d:d2:fd:b7:c4:b6:d7:af:6b:ee:77:b4:93:29:1a:
                    1b:07:56:c9:fc:e6:82:73:5a:f0:ab:b2:b7:f1:7c:
                    28:cd:d7:1d:be:28:8a:91:1a:93:b0:90:e6:ba:75:
                    27:7a:85:95:0c:88:ab:cf:21:61:8d:9a:f5:d8:b4:
                    d9:ad:67:20:f7:5d:d6:46:e3:cb:61:4e:02:94:15:
                    8e:cb:fe:57:92:13:01:43:63:db:4a:81:79:7f:41:
                    58:33:13:5d:7c:34:b7:96:1f:5e:f8:a2:b0:24:26:
                    2c:3c:6c:e2:fe:e0:e9:1d:fb:bf:79:c9:ee:d0:f8:
                    c8:f0:a7:78:13:e5:23:ea:48:e4:c0:9d:96:d5:06:
                    a6:a0:23:19:b5:47:9d:ce:c3:d0:b1:4c:4d:59:ae:
                    a9:33:91:eb:84:3f:00:5f:a5:21:cf:2c:9b:59:c8:
                    fc:1e:57:b8:97:27:24:c9:05:cd:5f:94:62:56:84:
                    91:eb:b5:d6:5b:c6:cf:3c:3b:94:29:1c:e2:21:a2:
                    e9:8d:8a:a8:22:d2:3c:98:98:a9:57:67:2d:be:86:
                    6b:ec:6b:5f:a4:cf:6c:96:39:df:17:0c:50:2d:88:
                    9d:ba:ce:8d:8c:fc:24:a9:30:27:25:c1:49:25:16:
                    4b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:16:A9:C6:A3:4F:11:A2:38:80:85:B7:6D:B8:9E:4C:82:23:AF:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/8e4266c6-bc79-331c-9325-8c08ab040eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa/15115143-11c8-4b06-80a1-a991fa50f2fa.crl

            X509v3 Authority Key Identifier:
                keyid:57:16:FD:A1:1D:1A:0A:99:4E:6E:27:9D:28:B9:72:96:F9:BD:86:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/15115143-11c8-4b06-80a1-a991fa50f2fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e3:b8:16:ff:57:22:7e:8f:80:c7:7a:31:d6:61:ef:5c:86:
         bf:13:d4:2e:56:7c:e5:51:83:53:60:35:d5:7d:97:29:a9:05:
         f2:66:13:8f:d3:69:d2:cf:9e:04:58:08:0d:a4:a4:e3:7e:6c:
         fd:2d:93:05:bb:fd:78:2e:9a:c7:a3:e6:b6:7e:e8:62:d3:8d:
         77:32:8f:95:93:e0:e6:b0:69:0e:1b:e3:03:17:32:ee:83:e9:
         9b:f0:46:9e:15:68:5f:fd:46:fd:77:c6:1b:d4:5d:d5:64:7a:
         3d:e9:47:aa:c0:d7:ea:d7:7b:44:c6:1e:e1:02:ac:b1:76:58:
         09:fe:ba:74:a8:37:06:d9:1a:6b:fc:9f:4d:29:71:84:b3:ca:
         20:51:95:0f:fe:f1:04:b4:07:8b:9d:77:3f:2b:d0:e3:7c:97:
         29:85:19:e7:bf:29:30:44:2d:4d:8e:33:2d:f7:a7:e6:c6:98:
         53:67:b7:b4:d8:32:21:f5:a1:70:f6:be:d8:1d:ec:90:db:29:
         71:b2:dd:ac:ef:da:99:ec:62:7f:29:6b:e6:69:18:53:39:52:
         4c:d4:7a:b2:50:35:af:36:c3:50:6b:21:7c:cd:c6:0c:5e:c6:
         02:16:f5:af:94:fe:bf:e9:87:8e:76:f4:c9:f5:71:55:0d:f5:
         e9:06:ce:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----