Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/7a3639aa-e76c-32a4-8009-d009d978cdbc.roa
File:                     7a3639aa-e76c-32a4-8009-d009d978cdbc.roa (raw, json)
Hash identifier:          X1lsC1bvl3nzJcHbncbUlWUlaRJ/9Iggk7B+7g65vao=
Subject key identifier:   FA:EE:B7:6E:A6:99:C8:D7:4E:00:A7:93:98:3B:F1:DD:E2:B6:B6:80
Certificate issuer:       /CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac
Certificate serial:       010D0C9F4328584015CF75A6A9340D8CEEBEAA80
Authority key identifier: 23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/7a3639aa-e76c-32a4-8009-d009d978cdbc.roa
Signing time:             Mon 28 Nov 2022 14:20:53 +0000
ROA not before:           Mon 28 Nov 2022 14:20:53 +0000
ROA not after:            Sun 02 Mar 2025 05:00:00 +0000
asID:                     10930
IP address blocks:        209.251.231.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:15:cf:75:a6:a9:34:0d:8c:ee:be:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac
        Validity
            Not Before: Nov 28 14:20:53 2022 GMT
            Not After : Mar  2 05:00:00 2025 GMT
        Subject: CN=1ca50a5e-1b3e-48f6-bb34-10513dda9e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7b:63:f7:c1:55:db:1e:75:b0:0a:1b:ee:68:
                    c4:28:7e:ae:02:d9:27:d4:fb:4a:90:37:cc:a9:d9:
                    80:ac:64:f6:5a:1a:f4:7e:d1:6c:8d:5a:54:61:49:
                    d2:31:c6:d1:6c:93:61:69:cf:92:9e:44:a6:dd:38:
                    d2:64:db:81:03:f2:ea:94:43:c4:5d:24:55:a8:55:
                    53:de:19:d0:49:66:cf:2f:2b:95:2e:46:d7:10:35:
                    41:31:74:5a:63:f3:5c:bd:b8:e3:3e:74:36:94:c2:
                    d4:e9:61:88:36:a7:76:78:3a:07:4e:46:4d:9a:55:
                    5a:05:e4:50:10:f6:76:73:c9:94:c7:f0:cd:af:7c:
                    23:10:a0:c5:7b:28:04:61:d0:33:d6:1d:27:62:ef:
                    44:10:99:e2:c5:43:e8:dd:7c:62:e8:f4:3d:0d:3d:
                    ca:73:cc:2a:f6:a1:f5:11:cd:d3:7d:cf:2f:98:1c:
                    04:56:61:a2:6f:9f:ad:7d:da:4a:a5:e7:84:de:ab:
                    3c:9d:d8:08:19:7a:8f:68:02:0e:b1:54:0c:e2:49:
                    0d:33:5f:d7:fd:5f:01:76:6f:11:f0:1f:a4:89:ce:
                    c6:f9:90:9b:c6:ab:85:47:28:f1:bf:56:45:41:57:
                    ba:5a:2d:ae:04:1c:af:af:36:f5:30:ae:ae:e5:a6:
                    9b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EE:B7:6E:A6:99:C8:D7:4E:00:A7:93:98:3B:F1:DD:E2:B6:B6:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/7a3639aa-e76c-32a4-8009-d009d978cdbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl

            X509v3 Authority Key Identifier:
                keyid:23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:77:91:d1:d7:e0:02:dc:84:59:2c:dd:59:95:c3:79:c6:e0:
         16:fb:23:68:05:99:1f:2a:ec:61:5e:15:70:b7:d1:87:36:62:
         86:51:72:c0:38:f9:60:1f:e2:d4:90:f4:c1:60:88:0c:e0:5c:
         01:98:2f:df:9e:7a:a9:71:73:0c:92:2b:d9:0a:54:2b:ff:db:
         90:11:30:4b:d1:78:1a:76:50:58:e9:8e:16:e4:a3:95:30:ae:
         e1:54:a0:1c:a2:64:9c:9d:f1:84:7c:e9:1d:41:93:ae:0e:ac:
         7e:d1:df:2f:8a:ea:af:3b:e7:c8:5c:70:25:a5:17:ed:8d:41:
         18:7c:0b:d2:e0:bc:30:dc:0f:63:f4:43:a9:2a:03:1f:d9:15:
         22:b6:65:1d:e8:8d:a0:0a:2c:35:a4:37:2f:73:8d:17:ad:bd:
         e9:87:42:ea:70:0b:0a:08:c0:11:37:84:a6:5e:6f:a7:b8:02:
         73:86:40:7b:cd:84:f0:9e:a5:c9:ce:17:ec:0a:84:a7:26:6e:
         91:fb:92:e3:6c:d8:5a:ab:40:25:d7:a6:8a:60:70:5b:eb:03:
         f7:0e:17:75:fe:41:81:c8:f8:df:5b:bb:55:df:20:14:b1:fa:
         d0:3e:da:92:5a:2e:a5:d5:27:5f:6f:ff:04:6c:77:90:76:72:
         c8:92:e4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----