Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/82d64880-a109-3c7f-9606-48568b394199.roa
File:                     82d64880-a109-3c7f-9606-48568b394199.roa (raw, json)
Hash identifier:          eaprxdvlBe5H0LcORiHAytCfnZgxX9UquFIFdj4hLzw=
Subject key identifier:   5E:9E:EE:FA:4A:24:77:55:F3:7C:14:8A:AB:BB:15:8B:78:87:C3:78
Certificate issuer:       /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
Certificate serial:       010D0C9F4328584087C497947802EE7FA769A800
Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/82d64880-a109-3c7f-9606-48568b394199.roa
Signing time:             Thu 18 Aug 2022 13:21:25 +0000
ROA not before:           Thu 18 Aug 2022 13:21:25 +0000
ROA not after:            Wed 20 Nov 2024 05:00:00 +0000
asID:                     49999
IP address blocks:        209.240.12.0/22 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:87:c4:97:94:78:02:ee:7f:a7:69:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e
        Validity
            Not Before: Aug 18 13:21:25 2022 GMT
            Not After : Nov 20 05:00:00 2024 GMT
        Subject: CN=9f7301ef-6bad-4d2e-91a5-6390ef54508c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:e9:17:53:48:7e:52:85:09:ec:ec:03:06:
                    6c:12:be:c6:4d:0b:48:a4:c7:b1:8c:b4:96:88:17:
                    99:ae:bb:1a:59:50:66:43:b8:18:f4:cd:a0:42:53:
                    c9:3d:36:97:42:87:39:65:79:ca:1f:a1:4e:17:cc:
                    54:5d:b3:6b:93:98:4a:95:47:ce:ce:b0:d5:41:b5:
                    b1:f2:53:e1:54:83:ef:23:2b:85:e8:21:87:da:5b:
                    9e:c6:07:7d:ae:19:78:e5:64:5c:ae:4e:39:ab:5e:
                    4f:a7:d9:98:ae:3d:28:c8:78:c9:29:de:31:cb:0c:
                    06:34:17:32:3f:56:75:85:4e:30:64:37:09:a7:08:
                    a4:5e:b8:7f:ba:c5:1e:d9:65:a2:fe:c0:3b:88:29:
                    7d:99:18:8f:2c:5f:da:23:3d:3d:cb:66:7c:6c:32:
                    3f:3c:ba:d2:79:bc:81:78:da:c5:f7:ec:0c:31:0f:
                    31:76:d1:f3:27:d6:11:f8:17:28:76:e1:cc:7a:c0:
                    6c:23:40:23:23:50:f5:77:5d:e1:ed:ad:bf:eb:9a:
                    b4:16:6a:ea:f3:cc:9e:f9:54:b8:36:b9:8f:5f:54:
                    3e:80:61:c8:c0:fc:92:39:2f:91:9d:bb:49:11:d4:
                    71:95:e9:22:7b:79:34:62:51:6e:8f:88:6e:63:d0:
                    2d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9E:EE:FA:4A:24:77:55:F3:7C:14:8A:AB:BB:15:8B:78:87:C3:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/82d64880-a109-3c7f-9606-48568b394199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl

            X509v3 Authority Key Identifier:
                keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.240.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ee:04:ff:54:14:85:9d:ff:d4:f2:7f:d6:ab:15:72:c0:54:
         d9:ff:c6:5e:57:5b:ce:d4:cd:da:46:26:f6:6f:bc:bd:d0:03:
         6c:44:25:68:2b:e6:08:3c:7e:99:13:2b:f2:48:9f:a3:af:b1:
         2d:4f:3f:ff:24:2a:a1:a2:6b:df:a5:3d:12:2b:ac:9f:c7:ee:
         86:de:bc:2a:cb:77:89:03:64:09:cf:18:36:b8:87:4b:7c:25:
         ab:33:aa:45:42:e2:4d:4b:10:de:0b:f5:e3:9d:25:dc:db:02:
         6a:f6:a3:73:59:68:2a:4b:d2:d8:33:ec:89:13:aa:20:ed:30:
         c4:aa:e0:1e:2e:37:2d:a7:4b:4e:7c:11:7a:06:c8:16:ee:89:
         6d:07:41:79:5b:af:e9:fe:d9:a5:1a:26:8d:ca:b0:6c:cc:41:
         78:fc:5e:db:03:97:68:45:50:e8:1c:dd:4e:ac:b1:45:a7:a7:
         00:a4:86:59:67:af:ed:c9:cd:59:ac:ec:1a:e7:e2:0f:55:34:
         20:5d:7e:ed:bc:9e:8c:c2:29:fe:96:8c:c4:ff:5f:1d:8e:3b:
         a1:9e:38:e0:5d:1e:6f:f6:ea:49:93:80:c7:9f:78:a3:47:bc:
         e6:fe:a3:f6:e5:fa:d8:59:6d:d4:f4:3a:69:e5:af:60:97:ce:
         d9:ab:93:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----