Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/65e0badf-d5bc-3df1-a4df-f858bd0b3b38.roa
File:                     65e0badf-d5bc-3df1-a4df-f858bd0b3b38.roa (raw, json)
Hash identifier:          rESR9iwByXf/4IyrQ3loBAfLP4v1aczSx3MkcSoQpn0=
Subject key identifier:   63:5F:2A:84:AE:D9:27:B7:DD:61:1E:20:91:A4:17:BF:7F:F6:32:46
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328576D51CC73C042CFC158BE47F98C
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/65e0badf-d5bc-3df1-a4df-f858bd0b3b38.roa
Signing time:             Fri 02 Dec 2016 06:45:37 +0000
ROA not before:           Thu 01 Dec 2016 05:00:00 +0000
ROA not after:            Tue 01 Dec 2026 05:00:00 +0000
asID:                     5511
IP address blocks:        209.88.0.0/16 maxlen: 16

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:58:be:47:f9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Dec  1 05:00:00 2016 GMT
            Not After : Dec  1 05:00:00 2026 GMT
        Subject: CN=88f65f2d-5dbc-4b43-825a-0bc25e7f00a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2c:2d:7a:5e:58:7d:ca:aa:11:5f:e4:51:08:
                    cf:b4:e5:f1:cc:c5:5c:7e:cb:06:ef:94:a8:19:03:
                    19:cd:e6:2c:0f:e8:90:33:a4:53:6b:8d:13:fc:4d:
                    62:59:f4:a1:3f:46:d2:21:08:ce:2a:ab:98:ca:f9:
                    4d:8f:fb:6a:5d:ba:04:59:16:84:5b:b3:3d:00:6f:
                    21:b0:9a:8d:46:a1:cd:66:25:4d:65:68:49:a5:46:
                    13:eb:f2:39:d5:49:a6:97:96:4e:51:69:38:a3:bf:
                    e8:35:3c:34:3f:ea:16:91:d3:76:bd:73:d3:6c:f1:
                    fe:9d:bf:9e:c7:97:43:1b:64:e8:e5:1d:da:bb:9d:
                    00:a9:f9:89:f4:52:18:a7:78:3e:71:53:70:b1:74:
                    8e:e2:b9:47:9a:0c:53:f4:28:99:56:d4:73:3d:9a:
                    79:53:f4:0a:4f:ba:12:5c:14:3f:b9:66:95:00:a8:
                    4b:ce:d4:5f:14:67:58:4f:dd:13:99:16:87:7f:47:
                    ca:86:c8:8a:d8:9e:7e:71:bf:cd:49:3f:67:98:6b:
                    0a:25:73:c1:95:f9:74:d1:25:83:85:9b:82:72:5d:
                    17:86:f3:4a:91:f2:a4:9e:e6:6b:a7:8b:1d:ab:a7:
                    fa:f2:d2:04:c0:a1:8b:36:e3:fd:c2:28:f6:67:b4:
                    61:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5F:2A:84:AE:D9:27:B7:DD:61:1E:20:91:A4:17:BF:7F:F6:32:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/65e0badf-d5bc-3df1-a4df-f858bd0b3b38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.88.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b5:20:5e:36:1e:1e:6f:c5:a6:91:71:65:31:0e:4c:b4:d9:
         43:fd:16:c9:d0:36:86:25:f5:d2:6d:21:6e:76:14:cf:a8:6c:
         a9:16:f9:a7:b1:c5:0d:fa:70:f7:a8:7c:50:7b:c1:d3:ee:86:
         56:4d:22:79:81:90:7a:16:da:a1:1d:37:55:83:1d:9d:22:bb:
         85:f8:02:3c:6f:50:53:ae:ad:d3:17:09:86:ff:b4:ad:4a:75:
         2f:85:b0:85:89:2c:df:0b:4b:3d:56:73:38:d9:1f:2d:e3:20:
         bb:30:0a:fc:9a:16:af:76:06:c4:45:13:0d:55:ce:0f:c1:cd:
         05:13:01:97:71:b2:96:b2:e9:ba:56:2a:7d:a8:1c:d4:b2:67:
         fa:3b:c5:b5:b1:d9:eb:fd:98:51:cb:63:73:7f:c6:76:b2:4f:
         1a:62:cc:90:a6:96:6c:16:a2:68:c7:29:3e:f5:d3:97:79:77:
         5c:51:a6:84:89:c8:2f:a4:83:cd:2c:06:dd:a4:72:f1:1e:e2:
         d1:75:ce:3d:06:5c:19:a1:da:a9:d0:0b:4c:db:bb:f9:3a:3a:
         e3:91:39:87:4b:08:d2:87:3d:78:bb:b8:cd:21:d1:d0:7d:db:
         c9:19:0e:dc:61:7b:f7:67:96:b0:a4:f1:75:47:45:f6:ac:12:
         47:1c:d2:7f
-----BEGIN CERTIFICATE-----
MIIGPjCCBSigAwIBAgIUAQ0Mn0MoV21RzHPAQs/BWL5H+YwwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGYyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFiZmUz
NzAeFw0xNjEyMDEwNTAwMDBaFw0yNjEyMDEwNTAwMDBaMC8xLTArBgNVBAMTJDg4
ZjY1ZjJkLTVkYmMtNGI0My04MjVhLTBiYzI1ZTdmMDBhOTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJosLXpeWH3KqhFf5FEIz7Tl8czFXH7LBu+UqBkD
Gc3mLA/okDOkU2uNE/xNYln0oT9G0iEIziqrmMr5TY/7al26BFkWhFuzPQBvIbCa
jUahzWYlTWVoSaVGE+vyOdVJppeWTlFpOKO/6DU8ND/qFpHTdr1z02zx/p2/nseX
Qxtk6OUd2rudAKn5ifRSGKd4PnFTcLF0juK5R5oMU/QomVbUcz2aeVP0Ck+6ElwU
P7lmlQCoS87UXxRnWE/dE5kWh39HyobIitiefnG/zUk/Z5hrCiVzwZX5dNElg4Wb
gnJdF4bzSpHypJ7ma6eLHaun+vLSBMChizbj/cIo9me0YWcCAwEAAaOCA1QwggNQ
MB0GA1UdDgQWBBRjXyqErtknt91hHiCRpBe/f/YyRjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5
MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJmZTM3LzY1ZTBiYWRmLWQ1YmMtM2Rm
MS1hNGRmLWY4NThiZDBiM2IzOC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYz
LTQ3MWYwZmFiZmUzNy9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZl
MzcuY3JsMB8GA1UdIwQYMBaAFORX1SgMCZwqfqilgLFv9rC6TPEeMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBm
YWJmZTM3LmNlcjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANFYMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB
AQBWtSBeNh4eb8WmkXFlMQ5MtNlD/RbJ0DaGJfXSbSFudhTPqGypFvmnscUN+nD3
qHxQe8HT7oZWTSJ5gZB6FtqhHTdVgx2dIruF+AI8b1BTrq3TFwmG/7StSnUvhbCF
iSzfC0s9VnM42R8t4yC7MAr8mhavdgbERRMNVc4Pwc0FEwGXcbKWsum6Vip9qBzU
smf6O8W1sdnr/ZhRy2Nzf8Z2sk8aYsyQppZsFqJoxyk+9dOXeXdcUaaEicgvpIPN
LAbdpHLxHuLRdc49BlwZodqp0AtM27v5OjrjkTmHSwjShz14u7jNIdHQfdvJGQ7c
YXv3Z5awpPF1R0X2rBJHHNJ/
-----END CERTIFICATE-----