Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7105df2-e2b7-46fb-bb49-17ba16563fbc/1e217943-a6cb-3671-aee7-514847a0b6dc.roa
File:                     1e217943-a6cb-3671-aee7-514847a0b6dc.roa (raw, json)
Hash identifier:          vbetV/YGGaGVQpfL8HrtvJM84hHvelD3Wo4UGvvbCb4=
Subject key identifier:   0F:92:67:BB:3F:13:5D:17:8F:53:9F:21:1E:71:AC:09:FE:57:5F:80
Certificate issuer:       /CN=a7105df2-e2b7-46fb-bb49-17ba16563fbc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1543271CEC5
Authority key identifier: EA:36:12:71:CF:21:B4:00:85:07:C4:17:F0:C4:AC:E5:9A:A1:99:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7105df2-e2b7-46fb-bb49-17ba16563fbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7105df2-e2b7-46fb-bb49-17ba16563fbc/1e217943-a6cb-3671-aee7-514847a0b6dc.roa
Signing time:             Wed 20 Apr 2016 06:53:19 +0000
ROA not before:           Fri 15 Apr 2016 04:00:00 +0000
ROA not after:            Wed 15 Apr 2026 04:00:00 +0000
asID:                     394368
IP address blocks:        204.174.100.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:54:32:71:ce:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7105df2-e2b7-46fb-bb49-17ba16563fbc
        Validity
            Not Before: Apr 15 04:00:00 2016 GMT
            Not After : Apr 15 04:00:00 2026 GMT
        Subject: CN=b0d31b60-bd67-4de0-a203-2387c00ce63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:18:5f:1a:61:ab:75:95:15:30:c3:cf:59:
                    74:e6:7d:c0:a9:3d:cb:c4:20:dd:64:81:6a:e2:49:
                    28:e1:20:60:27:87:56:f4:5d:f7:3a:e5:73:d1:c8:
                    70:e8:0c:4f:02:a5:c5:99:97:24:a4:84:68:df:27:
                    55:46:93:17:42:ce:fa:17:0a:09:c2:cd:7a:8d:0e:
                    af:fa:b9:24:f8:5f:49:1c:e0:af:51:70:a5:b3:87:
                    4c:f0:66:a8:de:b5:c1:3a:69:dc:ec:9d:9d:88:ba:
                    9e:1f:00:99:b0:b5:8b:82:1e:70:a7:52:e1:d7:e4:
                    08:c6:6f:91:3e:5c:29:c8:8d:91:82:94:23:bf:6b:
                    d4:ed:c5:bd:e3:65:87:fa:d5:40:f2:9d:7c:d5:5f:
                    10:9e:56:79:37:81:35:76:b0:9b:72:06:6e:be:b2:
                    8c:9b:70:22:ba:2a:f5:28:ce:4d:d4:4e:b2:33:a5:
                    ef:03:b1:b4:16:88:79:2d:8a:77:65:e9:35:06:09:
                    aa:7e:d2:c0:35:e0:6f:63:16:74:71:c2:64:76:47:
                    38:10:e3:78:65:3e:05:2f:49:2e:2f:74:fb:85:ff:
                    f6:ef:da:8e:5f:b6:4a:ac:2e:a0:2b:06:a4:1c:0d:
                    15:e8:32:d7:27:7d:09:bb:94:0c:c3:85:2e:f4:b2:
                    7a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:92:67:BB:3F:13:5D:17:8F:53:9F:21:1E:71:AC:09:FE:57:5F:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7105df2-e2b7-46fb-bb49-17ba16563fbc/1e217943-a6cb-3671-aee7-514847a0b6dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7105df2-e2b7-46fb-bb49-17ba16563fbc/a7105df2-e2b7-46fb-bb49-17ba16563fbc.crl

            X509v3 Authority Key Identifier:
                keyid:EA:36:12:71:CF:21:B4:00:85:07:C4:17:F0:C4:AC:E5:9A:A1:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7105df2-e2b7-46fb-bb49-17ba16563fbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.174.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:43:1e:62:3e:68:b7:9d:34:92:dd:eb:22:1a:e4:5b:e8:dd:
         d0:16:7d:63:9a:6a:0a:62:f3:77:84:db:af:3a:ca:01:0d:71:
         b7:0c:15:08:fe:4e:81:53:4b:97:9a:c2:4f:b9:c5:0a:30:9f:
         59:60:30:c4:73:d8:96:82:53:a9:80:08:44:d3:fd:0e:b6:0c:
         0e:03:b6:79:c2:5a:f4:3d:2e:ad:69:9e:f4:cd:9e:cf:61:68:
         2a:c9:ca:67:ca:00:11:f1:05:f1:59:97:12:e9:4f:20:9e:30:
         6b:06:a3:db:89:3e:b1:12:2d:cd:b5:cb:85:6f:78:cf:35:57:
         28:54:42:2d:d8:87:8a:f4:d8:8f:c9:26:f0:dd:ef:8f:7d:1b:
         d6:29:14:11:0e:1b:5c:58:5b:0d:ff:a1:b9:5a:1e:e5:d0:58:
         4a:4c:71:d4:77:c2:14:d3:f8:5c:78:c0:08:f8:d8:35:27:e5:
         06:3a:60:0b:c2:7c:0e:ef:b8:c1:35:f7:9e:29:eb:f8:3b:ca:
         fa:ef:fd:18:e1:b4:1d:80:98:db:97:86:02:bb:83:4b:96:18:
         a1:d6:8f:ec:d0:c7:8c:e3:0a:1a:88:8c:6e:65:d0:8a:e4:41:
         46:78:eb:62:bb:a6:18:ee:73:4c:0f:53:a4:41:89:b4:5f:86:
         6a:7e:ef:6a
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BVDJxzsUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGE3MTA1ZGYyLWUyYjctNDZmYi1iYjQ5LTE3YmExNjU2M2Zi
YzAeFw0xNjA0MTUwNDAwMDBaFw0yNjA0MTUwNDAwMDBaMC8xLTArBgNVBAMTJGIw
ZDMxYjYwLWJkNjctNGRlMC1hMjAzLTIzODdjMDBjZTYzZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAM14GF8aYat1lRUww89ZdOZ9wKk9y8Qg3WSBauJJ
KOEgYCeHVvRd9zrlc9HIcOgMTwKlxZmXJKSEaN8nVUaTF0LO+hcKCcLNeo0Or/q5
JPhfSRzgr1FwpbOHTPBmqN61wTpp3OydnYi6nh8AmbC1i4IecKdS4dfkCMZvkT5c
KciNkYKUI79r1O3FveNlh/rVQPKdfNVfEJ5WeTeBNXawm3IGbr6yjJtwIroq9SjO
TdROsjOl7wOxtBaIeS2Kd2XpNQYJqn7SwDXgb2MWdHHCZHZHOBDjeGU+BS9JLi90
+4X/9u/ajl+2SqwuoCsGpBwNFegy1yd9CbuUDMOFLvSyem8CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQPkme7PxNdF49TnyEecawJ/ldfgDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTcxMDVk
ZjItZTJiNy00NmZiLWJiNDktMTdiYTE2NTYzZmJjLzFlMjE3OTQzLWE2Y2ItMzY3
MS1hZWU3LTUxNDg0N2EwYjZkYy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2E3MTA1ZGYyLWUyYjctNDZmYi1iYjQ5
LTE3YmExNjU2M2ZiYy9hNzEwNWRmMi1lMmI3LTQ2ZmItYmI0OS0xN2JhMTY1NjNm
YmMuY3JsMB8GA1UdIwQYMBaAFOo2EnHPIbQAhQfEF/DErOWaoZn5MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYTcxMDVkZjItZTJiNy00NmZiLWJiNDktMTdiYTE2
NTYzZmJjLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMyuZDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEACEMeYj5ot500kt3rIhrkW+jd0BZ9Y5pqCmLzd4TbrzrKAQ1xtwwVCP5OgVNL
l5rCT7nFCjCfWWAwxHPYloJTqYAIRNP9DrYMDgO2ecJa9D0urWme9M2ez2FoKsnK
Z8oAEfEF8VmXEulPIJ4wawaj24k+sRItzbXLhW94zzVXKFRCLdiHivTYj8km8N3v
j30b1ikUEQ4bXFhbDf+huVoe5dBYSkxx1HfCFNP4XHjACPjYNSflBjpgC8J8Du+4
wTX3ninr+DvK+u/9GOG0HYCY25eGAruDS5YYodaP7NDHjOMKGoiMbmXQiuRBRnjr
YrumGO5zTA9TpEGJtF+Gan7vag==
-----END CERTIFICATE-----