Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5eb64250-2961-324c-9f4c-84b11f53f3b1.roa
File:                     5eb64250-2961-324c-9f4c-84b11f53f3b1.roa (raw, json)
Hash identifier:          PiIBaLey/zabynfBz1JFfmv3CQDmzEpUxYWlpc61QxU=
Subject key identifier:   61:F4:ED:58:F7:9E:29:4D:FD:86:5E:CF:FA:C2:54:00:E4:2E:5C:3B
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1720EB4A10B
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5eb64250-2961-324c-9f4c-84b11f53f3b1.roa
Signing time:             Wed 13 May 2020 15:43:38 +0000
ROA not before:           Thu 10 Jan 2019 05:00:00 +0000
ROA not after:            Wed 10 Jan 2029 05:00:00 +0000
asID:                     3549
IP address blocks:        8.242.216.0/21 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:0e:b4:a1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Jan 10 05:00:00 2029 GMT
        Subject: CN=c132e4a3-e53a-46fd-b7f8-85f476f145a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:50:19:8c:5e:f7:31:95:60:28:f1:8a:bb:7c:
                    55:19:b6:aa:3a:84:70:7a:3a:6b:43:84:7c:d9:12:
                    e3:d6:cb:74:77:e8:ad:4a:8f:5e:62:80:8f:07:45:
                    61:de:4b:15:ab:09:8e:b4:a0:e3:a7:3c:c4:93:6d:
                    cc:da:f9:35:f2:e3:a2:01:94:99:41:4b:7f:12:b7:
                    89:84:f4:75:27:6a:ef:7a:fa:aa:ce:58:1c:cb:ef:
                    eb:00:68:e2:a6:9f:27:85:fc:57:17:db:fc:f0:e2:
                    58:46:0f:a2:63:4f:af:6e:c8:9d:fd:03:4d:ac:17:
                    5d:eb:48:b5:b2:0f:1f:3b:13:f1:b1:0f:a9:66:e6:
                    f4:59:5f:80:17:2d:56:fb:bf:b9:ab:3b:ee:5f:89:
                    30:e7:a1:9d:c1:cb:b7:94:77:48:3f:5a:79:ec:79:
                    e1:c8:c8:40:88:0c:30:4e:d5:cd:d8:8b:59:4b:7f:
                    01:5c:8d:0f:61:74:94:04:b9:8c:54:4b:15:f6:05:
                    33:ec:5c:b4:9a:00:25:da:9b:33:d8:fd:6f:18:c1:
                    9a:d3:4d:16:4c:76:83:ba:16:ae:75:0a:70:6f:2f:
                    cf:fc:7d:a1:e4:68:e9:71:36:8d:4b:93:74:7b:4a:
                    2b:9c:bd:4d:ae:21:17:35:5a:25:62:29:5c:3b:96:
                    7b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F4:ED:58:F7:9E:29:4D:FD:86:5E:CF:FA:C2:54:00:E4:2E:5C:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5eb64250-2961-324c-9f4c-84b11f53f3b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.242.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:32:88:d6:b1:6f:d2:4d:cb:70:f9:66:af:c3:f0:15:06:80:
         49:1d:a9:76:58:1f:37:0d:15:ea:1f:1e:42:be:51:e1:f3:43:
         95:12:53:87:61:b9:c2:fa:6d:c2:7a:61:40:1b:c4:ab:70:ee:
         d6:d6:3f:85:54:84:0d:95:78:07:56:81:d2:17:d1:d5:07:df:
         b1:f1:3d:8f:bc:8d:4f:26:19:25:d2:c9:eb:2c:69:13:cc:fb:
         8d:95:d0:63:b1:29:60:74:1f:ec:76:43:c4:d7:47:6a:c7:a5:
         ee:24:e5:8a:b8:3d:e5:b8:dd:1a:28:6b:33:6a:9c:bf:f3:dd:
         f1:1b:23:69:3d:93:09:3e:62:47:06:e6:f5:1d:a7:a5:b6:4c:
         6d:51:64:a4:c6:40:72:e9:90:a9:23:46:87:56:7a:fb:7b:64:
         25:ed:5d:86:fc:1e:4b:f9:ef:02:0a:ae:ca:72:b9:6e:40:ad:
         51:88:c9:03:f8:4a:d0:fd:02:e4:b3:cb:70:61:94:98:81:a3:
         87:64:16:06:dd:27:60:cf:a8:70:49:e6:6d:f3:40:54:66:20:
         43:79:f6:8f:d2:94:22:95:46:df:9f:dd:bf:16:54:2e:1c:9a:
         eb:58:51:63:e9:4f:6e:ac:14:7d:8f:db:5d:58:b0:70:9c:42:
         82:aa:4c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----