Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/53ad5999-e637-3498-8664-6ee922b69b9f.roa
File:                     53ad5999-e637-3498-8664-6ee922b69b9f.roa (raw, json)
Hash identifier:          HTng6NPEH5/m7iCyMiVoFl3nk4u/D/oubjq5FR/1vpY=
Subject key identifier:   37:17:65:C9:65:36:2C:2B:1A:1E:3F:B1:0F:57:74:C8:C4:0A:C2:3C
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F43285846F5F59216BA22FA30B60C5880
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/53ad5999-e637-3498-8664-6ee922b69b9f.roa
Signing time:             Thu 22 Aug 2024 13:00:40 +0000
ROA not before:           Thu 22 Aug 2024 13:00:40 +0000
ROA not after:            Wed 20 Nov 2024 14:00:40 +0000
asID:                     14593
IP address blocks:        66.9.160.0/19 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f5:f5:92:16:ba:22:fa:30:b6:0c:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Aug 22 13:00:40 2024 GMT
            Not After : Nov 20 14:00:40 2024 GMT
        Subject: CN=5a02e3fd-4e48-42ba-8014-9eb9dcc49449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:71:bc:4e:d0:73:9c:9d:cd:87:55:fb:ae:
                    52:75:e8:0a:55:3a:aa:ae:4b:d9:a0:19:e8:38:9f:
                    23:bf:a9:52:4f:c9:ff:d9:87:e2:86:f4:52:8e:df:
                    ff:be:1a:e1:06:02:49:1d:3b:08:ed:30:8a:e6:62:
                    e5:c1:db:e9:6d:db:9a:4b:82:2b:58:50:ab:29:1d:
                    07:59:e2:7e:5b:8e:62:f9:45:4d:39:76:ef:80:72:
                    ee:72:c2:e7:8d:e0:a6:50:a1:f4:ad:b6:a3:de:b5:
                    80:ce:65:43:40:d1:49:9b:50:ff:81:9f:f4:9b:72:
                    58:29:97:47:1b:ec:ff:f3:00:2f:c0:39:ff:cf:b2:
                    f8:65:5b:dd:de:51:13:78:71:f2:0b:ed:e3:a8:23:
                    e9:8d:40:71:14:0e:25:ac:56:e7:f0:e5:3e:8b:95:
                    f5:c7:ae:d8:43:27:70:45:15:cd:a5:dd:d6:02:49:
                    6e:61:c8:3a:d4:76:78:49:a3:b2:1e:e0:7c:c2:6c:
                    6c:c4:62:b6:1d:6a:83:b0:07:f4:dc:01:bf:39:62:
                    20:08:89:b2:4c:68:c0:6a:bb:9e:92:23:83:2c:6a:
                    94:5d:53:58:87:28:2e:7a:44:3b:5c:17:89:1b:c3:
                    7c:e8:20:be:90:8d:f7:82:a9:62:09:d7:32:37:f5:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:17:65:C9:65:36:2C:2B:1A:1E:3F:B1:0F:57:74:C8:C4:0A:C2:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/53ad5999-e637-3498-8664-6ee922b69b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.9.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c0:14:3c:6b:69:50:da:8b:40:fe:8a:92:61:d7:15:c3:a3:
         e8:b6:3e:89:dd:a2:6d:10:95:44:9c:b8:92:39:f0:40:1c:8e:
         77:88:ab:af:a2:19:82:86:70:3d:14:2a:05:ee:4c:06:33:90:
         49:f3:23:6c:17:4a:f7:d6:fc:e4:d0:b6:17:39:b6:a5:3c:db:
         b1:da:60:b7:2b:2e:50:64:bd:78:41:3e:da:d2:bf:bd:98:50:
         c8:39:be:b3:78:86:4e:fd:7d:16:30:ac:be:ce:d8:3e:a0:4a:
         5f:a3:ae:4c:2e:ba:9c:a6:bd:be:8f:bb:e0:68:3c:a0:a7:c9:
         3e:1c:70:cc:bd:ee:89:a8:de:80:28:a8:18:e8:15:57:c3:9e:
         8d:98:40:d9:6d:04:12:80:31:e5:c0:83:dc:4f:9e:81:13:41:
         02:2d:68:7e:ac:8c:1f:ef:4f:e0:d6:7c:79:9e:17:63:54:3a:
         c3:f7:8e:42:0e:b2:65:73:9e:af:51:98:3b:6e:da:df:a9:f3:
         e7:0a:c2:bd:51:03:ab:78:63:42:2e:66:dc:1b:94:3b:8a:50:
         20:4a:a6:46:97:fe:40:6c:e7:3b:1b:a0:58:52:e4:85:c0:35:
         ae:e3:d5:45:e1:95:9d:4a:29:31:26:e7:53:e4:2e:cd:e9:ce:
         99:c4:4b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----