Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/bfe7762a-d55e-30a6-93a7-91f84412b331.roa
File:                     bfe7762a-d55e-30a6-93a7-91f84412b331.roa (raw, json)
Hash identifier:          Ir2hmzC7EQ2DNZWm4OX9as54jOqxQJHP9g9qXwI5j3s=
Subject key identifier:   CA:24:0B:AB:3D:3F:CB:01:49:6E:30:9B:17:F6:8D:6A:E9:D7:3F:8E
Certificate issuer:       /CN=480e68d2-5883-4233-9f17-992a2ca71e2b
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E1513EA9
Authority key identifier: 26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/bfe7762a-d55e-30a6-93a7-91f84412b331.roa
Signing time:             Tue 23 Jun 2020 13:14:57 +0000
ROA not before:           Tue 23 Jun 2020 04:00:00 +0000
ROA not after:            Sun 23 Jun 2030 04:00:00 +0000
asID:                     43755
IP address blocks:        184.175.192.0/18 maxlen: 24
                          107.155.128.0/18 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e1:51:3e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480e68d2-5883-4233-9f17-992a2ca71e2b
        Validity
            Not Before: Jun 23 04:00:00 2020 GMT
            Not After : Jun 23 04:00:00 2030 GMT
        Subject: CN=df9a1651-c33e-415f-8531-1d768d6c81d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:da:25:45:ec:66:35:a0:92:79:27:4d:8f:54:
                    a1:3e:ea:ea:fc:6b:11:9f:ed:91:5e:68:a2:66:85:
                    60:af:19:7e:8d:da:17:00:3e:2e:2e:cb:4d:d2:a4:
                    ef:59:d3:5a:24:fc:b6:1c:a9:57:7c:54:1a:26:a1:
                    61:1f:33:38:71:2f:26:3e:24:be:13:76:b6:f4:d9:
                    b8:03:f4:38:2f:15:40:bb:40:89:46:91:fa:83:10:
                    4f:c8:73:ec:2e:8c:c0:30:a4:d7:75:db:6d:e3:67:
                    d1:1f:2e:34:81:ed:00:f5:25:cc:55:3c:ba:1f:dd:
                    8e:9f:e4:ea:a3:88:06:4d:ce:c6:c5:6d:46:f6:55:
                    9f:d5:61:1a:9e:72:cc:8b:71:9a:c4:aa:68:a8:17:
                    84:8c:88:6d:cc:70:e7:e8:28:53:d9:de:ef:3d:da:
                    c3:0a:3f:4c:7c:2b:73:f2:24:c6:b7:a9:26:a0:26:
                    96:57:15:dd:d7:04:58:23:98:48:b5:b3:46:2b:72:
                    2f:f0:ba:0b:d8:aa:f5:17:fd:b7:e9:8d:e3:de:b9:
                    87:f4:bb:8d:81:d3:c1:2e:9b:82:ac:2d:60:08:5a:
                    b4:87:8e:95:3d:ea:17:b9:67:a6:c0:76:98:d3:36:
                    13:dd:2b:10:e1:df:62:41:f1:aa:e8:58:d0:70:b6:
                    29:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:24:0B:AB:3D:3F:CB:01:49:6E:30:9B:17:F6:8D:6A:E9:D7:3F:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/bfe7762a-d55e-30a6-93a7-91f84412b331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b/480e68d2-5883-4233-9f17-992a2ca71e2b.crl

            X509v3 Authority Key Identifier:
                keyid:26:9B:1E:68:03:C3:09:69:E3:8A:E5:95:A7:3F:33:33:66:8A:5F:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/480e68d2-5883-4233-9f17-992a2ca71e2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.128.0/18
                  184.175.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c8:78:84:5b:3d:f4:77:1e:a6:d8:bc:33:c7:1c:06:59:96:
         2d:f1:9c:17:e4:e8:f1:93:18:e7:b6:df:8a:d0:de:db:41:18:
         cb:26:70:a3:d3:55:0c:52:85:72:c2:ba:04:3b:ea:51:f7:2f:
         c5:9f:f7:51:34:df:6b:d7:65:46:ef:54:52:d0:ee:af:40:09:
         25:9c:9e:91:1b:bd:1e:dd:65:15:b8:42:66:7d:6e:50:ef:61:
         0d:5c:25:b9:e4:48:c1:4c:4d:67:3c:4f:eb:50:13:21:b0:37:
         53:42:b3:dc:3d:96:bf:b1:06:19:25:26:fa:41:0c:b4:49:b4:
         52:0b:1b:63:d9:0c:ca:e9:17:7f:c4:90:64:0c:26:34:be:b4:
         e0:21:ec:7a:cd:6f:20:a2:c5:84:c9:c3:b9:94:b8:45:1a:84:
         03:92:8b:18:4c:b6:ea:fc:43:c8:be:d8:82:ea:80:b8:45:46:
         2d:51:c6:eb:a4:31:c2:86:d4:96:bd:87:c9:29:96:8b:4f:c8:
         9e:24:fb:36:d4:f5:d1:6e:bc:2a:85:ae:e0:7c:21:b4:b5:1f:
         92:44:87:68:33:b4:e0:1e:0c:3f:59:40:dc:f2:fa:7e:a3:43:
         49:94:8b:d4:6a:4c:5d:bc:a9:3f:02:b1:1a:61:d8:c5:3c:1d:
         de:e5:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----