Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/e407b255-c5e4-3157-899d-74955e27f2c6.roa
File:                     e407b255-c5e4-3157-899d-74955e27f2c6.roa (raw, json)
Hash identifier:          DyOZeDgMqX+60APsqrDuNUQ06H2YBAVGjhpmH8WS32U=
Subject key identifier:   17:77:C3:97:4C:CF:2C:C8:8D:B3:44:94:F0:7A:A9:3E:5A:BA:C5:95
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328576D51CC73C042CFC158BE490D91
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/e407b255-c5e4-3157-899d-74955e27f2c6.roa
Signing time:             Fri 02 Dec 2016 06:46:48 +0000
ROA not before:           Thu 01 Dec 2016 05:00:00 +0000
ROA not after:            Tue 01 Dec 2026 05:00:00 +0000
asID:                     6505
IP address blocks:        209.88.0.0/16 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:58:be:49:0d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Dec  1 05:00:00 2016 GMT
            Not After : Dec  1 05:00:00 2026 GMT
        Subject: CN=a6149caf-9581-445b-8df1-dc66bf0cd828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7c:15:1f:82:ec:9d:b5:5b:43:5c:4c:67:22:
                    01:c2:45:f1:bf:0f:f8:6e:0d:13:0c:de:da:00:84:
                    2c:b2:70:f0:26:fe:29:92:3c:59:df:e4:f6:f3:2e:
                    3e:3b:9f:b1:e7:0b:e5:a3:6e:4d:e7:f9:08:49:bf:
                    fa:af:00:98:01:1d:4f:7f:5d:63:32:8f:f3:c7:9e:
                    78:09:9e:76:d8:20:aa:03:c8:d4:a4:41:52:7e:e6:
                    ae:4f:ac:c6:43:c5:50:53:e6:77:d8:ec:2f:f0:04:
                    ec:cd:ee:bb:96:f2:54:34:47:7c:72:40:d0:cd:5e:
                    65:e2:24:47:99:cf:ae:1b:ce:44:db:3e:d1:27:41:
                    94:ea:c6:39:8d:da:69:1e:64:5d:8b:8c:85:82:60:
                    b0:c4:74:b6:9f:a8:b0:33:ac:4f:20:05:3b:ae:c8:
                    f0:13:c2:a4:a3:93:a5:a9:f7:7a:f4:3b:10:c4:18:
                    66:17:d8:0a:b4:48:4d:21:b6:7d:47:25:bc:2b:dd:
                    e7:74:63:7c:37:44:a1:c1:be:68:42:6b:ce:dd:90:
                    e6:d2:3b:96:b0:6c:22:f7:6c:6a:12:30:fe:8f:35:
                    f4:76:b4:e9:60:fd:53:74:ea:36:4d:22:c3:58:be:
                    57:1c:75:df:f5:5d:ea:78:b6:68:5c:e1:c0:6d:af:
                    86:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:77:C3:97:4C:CF:2C:C8:8D:B3:44:94:F0:7A:A9:3E:5A:BA:C5:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/e407b255-c5e4-3157-899d-74955e27f2c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.88.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:c0:55:84:17:19:b0:17:fa:a1:bb:70:be:a9:af:6f:f0:69:
         28:1d:75:86:2a:e0:bd:e7:84:1d:c3:d1:5d:e8:e9:73:97:6d:
         7e:d5:55:e7:ca:89:25:75:b6:22:c7:9c:c8:be:23:b2:ad:32:
         8b:35:f6:e3:5a:b7:b1:d1:7e:f1:45:19:ab:e5:f5:f8:ef:c6:
         43:83:20:4a:22:8e:aa:a7:6c:3b:45:35:49:8c:da:19:f2:c2:
         ce:00:95:81:0a:1b:7d:b9:e6:90:43:ea:fa:23:a0:62:01:ab:
         8a:b1:f5:45:a1:06:bc:aa:fd:cf:bd:96:68:c9:0f:11:a9:d7:
         8c:cf:67:c8:19:44:54:c9:9b:7c:1c:dd:4f:04:c5:22:52:bd:
         4d:53:cd:d3:6c:2f:32:35:23:9a:9c:c4:b9:b3:c1:b1:ce:cf:
         90:0f:08:f0:fb:a1:d5:a9:39:e7:9b:6f:8a:da:d4:e1:4e:dc:
         ef:3b:f9:a3:08:9d:36:dd:56:7c:c0:fe:dc:fc:16:74:70:8a:
         cf:c1:3d:f0:40:cc:87:58:5c:70:8d:42:36:f3:4e:f0:55:84:
         7e:ea:35:a2:92:26:fa:49:e1:86:bf:5d:09:e4:08:d4:92:2b:
         a6:ff:cf:88:0c:c0:3f:7f:c1:b7:7d:10:18:ef:98:95:8b:2d:
         59:11:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----