Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f494e26f-f852-3b1c-b6f9-ed29a8e97c82.roa
File:                     f494e26f-f852-3b1c-b6f9-ed29a8e97c82.roa (raw, json)
Hash identifier:          7YrBZx0cx/xmd0K1SYDSYzCTpmMgXekEyDQWineJzis=
Subject key identifier:   AA:CF:D2:81:D2:7E:3C:3B:75:C7:E0:77:3C:7E:3F:AF:82:30:9B:63
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584488E9F3E0E7648FEF2F422500
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f494e26f-f852-3b1c-b6f9-ed29a8e97c82.roa
Signing time:             Sat 13 Jan 2024 02:00:25 +0000
ROA not before:           Sat 13 Jan 2024 02:00:25 +0000
ROA not after:            Fri 12 Apr 2024 01:00:25 +0000
asID:                     3356
IP address blocks:        209.100.0.0/16 maxlen: 16

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:88:e9:f3:e0:e7:64:8f:ef:2f:42:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 13 02:00:25 2024 GMT
            Not After : Apr 12 01:00:25 2024 GMT
        Subject: CN=a50d339a-2822-43c6-bc37-449664dc27f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:44:0e:1f:6c:a5:80:fb:47:d3:29:a7:3e:b9:
                    9d:9e:85:93:04:69:1b:27:92:85:a0:5a:04:64:9e:
                    56:6c:8f:0d:0f:0e:36:6d:be:04:8f:d3:8e:c9:eb:
                    43:6d:9c:51:3d:49:bf:10:cb:20:c8:16:df:68:d2:
                    02:ae:a7:0f:68:68:5c:0a:2c:54:0c:24:3d:8b:a3:
                    59:df:c9:69:7d:5a:7f:56:36:9f:1d:14:ef:81:9c:
                    26:11:bf:9a:99:2b:0e:b3:22:4e:73:1b:48:db:2b:
                    df:c1:7c:40:2d:28:bd:32:ec:ba:ca:87:be:3d:fe:
                    e1:11:81:f1:5b:88:ab:95:69:cd:b0:60:57:65:4c:
                    a5:b4:80:99:f0:34:5a:9f:40:7e:ce:31:25:b4:bc:
                    d6:bb:fd:9a:0d:2c:ee:bf:4e:75:ac:5f:c8:43:73:
                    58:71:07:a3:a1:2f:68:cf:7b:ce:a7:3a:a2:55:55:
                    8a:85:67:8b:c1:2a:9f:f3:82:27:bc:a1:89:d2:a4:
                    d3:c6:55:eb:04:2b:93:8b:b9:9b:fd:9a:68:43:ba:
                    a4:6f:c5:18:9e:5b:aa:34:f3:17:a0:7e:9a:1b:7d:
                    af:6b:15:df:87:ff:06:f1:ea:76:e0:54:4f:7a:f4:
                    ed:5e:50:6d:a1:24:78:b8:a9:35:e4:d5:f9:40:cc:
                    d1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CF:D2:81:D2:7E:3C:3B:75:C7:E0:77:3C:7E:3F:AF:82:30:9B:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f494e26f-f852-3b1c-b6f9-ed29a8e97c82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.100.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:66:b5:ef:dd:5b:a9:3c:b7:9c:99:82:07:16:4a:95:f1:79:
         85:da:43:79:82:b1:50:24:27:2d:4e:6a:33:e3:78:96:58:53:
         ad:30:78:03:90:45:a4:74:ec:49:ae:4b:41:f1:4e:63:62:c1:
         d2:53:0b:ac:9c:13:c2:f5:c9:48:fc:cc:3b:5a:db:5a:fe:9d:
         a1:b5:3c:cc:48:d4:a8:2b:48:a3:b5:fa:79:47:d1:18:b5:d4:
         b7:4d:78:62:f2:2a:4e:9f:98:87:90:8b:53:fa:12:57:ed:8e:
         ec:b4:ba:6d:63:01:66:35:51:09:97:23:09:c2:52:74:d5:0e:
         71:7b:99:f5:72:99:7b:5a:05:03:4b:68:79:4c:9a:cf:36:f6:
         74:5f:a4:dd:a4:42:2f:5d:ad:0f:3d:7e:ed:71:cf:44:e7:93:
         8b:44:54:d6:e2:7e:33:8d:a9:1d:ed:bb:c0:ee:02:1e:f8:80:
         a1:0a:32:ca:c6:41:ac:0d:2a:2a:97:16:34:35:3a:6f:cd:7a:
         2d:56:87:46:56:77:11:14:15:28:ab:57:01:28:93:a7:cc:d3:
         e3:e8:0f:23:9a:8a:7a:19:0c:0f:18:ae:bc:9c:96:af:3c:35:
         f6:d5:bc:f0:9c:c1:f5:58:41:93:4e:f9:15:69:73:64:3b:87:
         71:4d:5d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----