Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/3c059934-6fea-312c-88af-eba62dcaf3c4.roa
File:                     3c059934-6fea-312c-88af-eba62dcaf3c4.roa (raw, json)
Hash identifier:          LuqRk29k+tsBtbjtjAbeBZCK2XMQZPS53zgIzCwm8tA=
Subject key identifier:   C1:CA:33:A8:48:FA:AD:9E:14:2C:FD:72:93:24:8F:69:4B:3A:8C:0C
Certificate issuer:       /CN=e13a5b98-c410-4224-be84-d8a01047fa5b
Certificate serial:       010D0C9F43285844B594E91081F02A57D032F7A0
Authority key identifier: 07:34:FC:70:C9:43:E2:BF:27:D4:A5:DF:F4:64:39:7D:28:7E:65:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/3c059934-6fea-312c-88af-eba62dcaf3c4.roa
Signing time:             Mon 29 Jan 2024 02:00:26 +0000
ROA not before:           Mon 29 Jan 2024 02:00:26 +0000
ROA not after:            Sun 28 Apr 2024 01:00:26 +0000
asID:                     16519
IP address blocks:        140.226.0.0/16 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b5:94:e9:10:81:f0:2a:57:d0:32:f7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13a5b98-c410-4224-be84-d8a01047fa5b
        Validity
            Not Before: Jan 29 02:00:26 2024 GMT
            Not After : Apr 28 01:00:26 2024 GMT
        Subject: CN=62fb753e-d2f4-4c34-b51b-cc04794c03b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bc:ce:1f:19:3e:23:0d:8a:58:77:cc:07:e6:
                    30:8f:63:20:20:ea:21:e4:8c:84:59:c9:5d:6c:23:
                    dd:0d:c6:87:62:ae:ee:55:87:50:c7:1d:4d:07:4d:
                    b3:2f:08:da:56:69:28:6b:05:af:3f:f4:ad:f6:24:
                    b6:3b:8e:1c:f9:54:c7:75:90:be:c1:91:6e:20:20:
                    0c:59:97:e2:29:3e:36:ed:b0:3d:ee:34:d6:81:83:
                    62:c3:19:32:b6:48:b0:8a:d7:ba:df:c9:c6:21:e3:
                    6b:71:32:6f:aa:f9:16:70:90:54:19:2e:be:f6:14:
                    3f:82:f8:99:4c:14:b4:9d:53:15:51:90:d8:b0:85:
                    fd:33:b3:af:c2:e5:f3:f1:bf:70:22:30:28:ff:93:
                    3c:5a:e1:e6:ab:6e:14:6a:a2:05:f1:b1:bb:dd:f7:
                    32:04:a3:0c:67:c2:97:9a:b7:2b:12:2d:cb:48:57:
                    c1:03:c3:f2:b6:3e:98:dc:5c:bf:c9:a8:39:d7:f5:
                    a4:d7:0d:61:e5:33:f3:9f:da:9d:02:c9:2f:62:bb:
                    f7:b8:cc:50:04:af:d7:b9:3b:d7:0a:d4:89:8e:37:
                    c8:62:41:80:1f:6e:84:20:d1:e5:1b:9a:15:7e:98:
                    8b:3b:e5:57:3e:78:f6:1f:23:11:9f:88:85:fb:af:
                    ac:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CA:33:A8:48:FA:AD:9E:14:2C:FD:72:93:24:8F:69:4B:3A:8C:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/3c059934-6fea-312c-88af-eba62dcaf3c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b/e13a5b98-c410-4224-be84-d8a01047fa5b.crl

            X509v3 Authority Key Identifier:
                keyid:07:34:FC:70:C9:43:E2:BF:27:D4:A5:DF:F4:64:39:7D:28:7E:65:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e13a5b98-c410-4224-be84-d8a01047fa5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.226.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:cb:35:e8:b8:19:14:ac:a0:20:b9:4b:54:eb:69:4b:48:f8:
         01:09:d3:74:19:6b:b0:0c:22:10:02:1b:0d:59:ef:60:63:f5:
         c4:de:08:2b:c1:32:90:71:ef:ec:af:3a:5b:e5:3e:da:1b:05:
         26:03:39:9b:23:3b:99:0a:25:1b:9e:8f:1f:e6:66:f5:fe:5b:
         01:d2:df:7d:81:5d:43:bc:25:2a:b6:3d:57:21:aa:84:4c:92:
         7e:58:0d:86:94:2d:85:d2:75:5d:94:39:ed:53:31:49:81:4d:
         7e:4c:e4:f8:86:91:b9:46:14:da:d3:a0:bd:88:d9:42:f7:ee:
         fc:51:6d:74:58:8c:ba:96:05:03:33:cd:77:53:fa:ea:42:48:
         34:78:b6:9f:9b:96:72:db:7b:e8:c6:ba:0a:27:5e:f5:0b:4e:
         95:b1:22:14:54:a6:e2:18:3b:a4:bb:dd:f6:fe:d1:76:8a:35:
         68:d3:6c:b9:86:99:c9:8e:7a:40:13:f6:ad:51:e9:17:98:7c:
         fc:ff:c5:13:a4:a2:bd:87:c1:98:f3:da:1c:a3:85:43:0c:c4:
         ec:26:94:3d:93:99:09:ca:e7:ba:ae:91:a0:f4:07:08:05:90:
         66:c9:78:af:da:28:fb:a4:15:72:e5:71:e3:21:21:b3:d6:c0:
         a6:70:7d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----