Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d6562518-6733-3b4c-8e2e-f1c749e0b8fb.roa
File:                     d6562518-6733-3b4c-8e2e-f1c749e0b8fb.roa (raw, json)
Hash identifier:          DJw/KzzQ4NNGwa0LB9x/a6HpSlW5Vs2UqvcdkxZ2Q/I=
Subject key identifier:   44:D6:FE:45:99:13:13:E8:27:FB:20:31:5E:7E:70:4F:C4:49:26:6A
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328576D51CC73C042CFC173C0C3B9F5
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d6562518-6733-3b4c-8e2e-f1c749e0b8fb.roa
Signing time:             Wed 05 Aug 2020 22:35:19 +0000
ROA not before:           Thu 10 Jan 2019 05:00:00 +0000
ROA not after:            Wed 08 Nov 2023 05:00:00 +0000
asID:                     52468
IP address blocks:        8.242.223.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:c0:c3:b9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Nov  8 05:00:00 2023 GMT
        Subject: CN=c2e97200-5010-4478-bb57-980640423cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:63:20:42:9f:8f:0b:79:e5:69:c1:11:a5:
                    b8:77:cf:c4:da:13:bd:1f:98:2f:83:28:f7:8f:44:
                    08:c8:7f:e5:33:a4:f7:5c:f3:42:d2:b7:05:42:f7:
                    1c:0c:c6:83:c3:38:6f:1e:ba:8d:e8:05:e5:b9:1e:
                    25:be:79:d7:6b:25:fc:6e:65:73:cd:e4:9c:99:c4:
                    14:b6:09:ac:05:94:d2:3a:b6:60:82:42:ad:77:f2:
                    03:bf:83:d3:f6:9e:d3:5b:5c:07:ef:89:aa:93:e4:
                    6b:9b:ea:4e:e5:89:51:d6:81:62:15:be:2a:06:0d:
                    ca:18:6d:11:73:c9:bc:2b:37:c7:fe:48:1c:5c:9b:
                    96:1a:14:34:9a:d6:15:10:4a:a0:0a:f7:16:6c:f6:
                    98:02:9f:5c:42:ab:aa:d7:d6:82:a4:b5:ca:3a:02:
                    ea:90:56:7d:c2:e0:ba:0a:13:12:90:68:93:72:44:
                    ba:05:47:8f:a1:cf:94:2c:8e:46:2e:3e:a7:85:15:
                    39:bd:c4:17:6b:0e:55:6e:81:d0:69:d9:cc:1e:e7:
                    5b:96:e6:77:ac:de:26:61:c9:16:68:7e:54:c2:f6:
                    91:5e:d3:29:0d:ec:f8:fd:27:6e:29:b9:c2:1e:0e:
                    cd:60:a9:8d:c6:6f:d8:5e:fb:f8:0b:2b:84:11:a2:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D6:FE:45:99:13:13:E8:27:FB:20:31:5E:7E:70:4F:C4:49:26:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d6562518-6733-3b4c-8e2e-f1c749e0b8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.242.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:47:d2:61:02:92:b1:d7:f4:a2:19:95:39:b3:ea:7c:44:23:
         72:42:49:6e:70:f1:56:12:76:36:93:15:bc:45:7d:cc:29:e3:
         56:20:0b:2c:c9:7a:21:dd:cc:be:30:ed:12:ea:01:d0:d8:9e:
         4c:75:99:66:20:99:b3:49:ba:22:0d:10:56:9b:af:7c:f1:d2:
         cd:5c:2e:48:52:73:6d:f6:ff:1d:5d:9f:8c:31:a5:49:07:4b:
         a7:33:04:18:87:17:78:2a:7d:67:ef:65:fc:4e:3b:06:88:ed:
         7a:fa:0f:01:78:1b:ab:fd:77:23:19:a3:ec:1e:80:1c:49:d9:
         cc:13:19:0a:58:59:38:b8:c1:f8:50:c5:a5:03:39:4a:06:b2:
         64:33:2e:27:d7:80:c6:f4:87:03:1c:43:89:d6:d0:5d:c5:17:
         25:ab:4b:eb:f3:59:b0:ca:a5:58:55:41:e7:59:f0:6d:cd:79:
         e8:3f:e7:55:f8:02:4e:ff:18:ba:a9:94:7b:f8:17:f1:7b:82:
         ee:d1:2a:25:92:ea:b7:40:2e:bd:a4:98:5c:e3:45:81:db:3b:
         98:c9:e9:b3:31:75:f9:80:1d:36:02:e9:17:ef:08:91:27:74:
         87:c4:1d:59:52:f7:59:20:83:d4:e8:ad:8a:ec:7d:de:b5:5d:
         eb:b0:37:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----