Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/cf575376-bcf2-3ab5-b32f-dc001aacccd5.roa
File:                     cf575376-bcf2-3ab5-b32f-dc001aacccd5.roa (raw, json)
Hash identifier:          Y7s6rZ1Kn0oXEYji0EcWUDuWG7AjAfTOE0aotAXP0k0=
Subject key identifier:   92:2D:CD:BB:4F:CA:45:E1:10:27:BF:2B:4C:DF:D9:E2:4D:B6:9F:E1
Certificate issuer:       /CN=4746a92d-5f69-4264-863f-81298a3d93ed
Certificate serial:       010D0C9F4328583CA634D8FF9DDD6162E11CC500
Authority key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/cf575376-bcf2-3ab5-b32f-dc001aacccd5.roa
Signing time:             Tue 12 Oct 2021 04:00:00 +0000
ROA not before:           Tue 12 Oct 2021 04:00:00 +0000
ROA not after:            Tue 23 Apr 2024 04:00:00 +0000
asID:                     53340
IP address blocks:        104.128.78.0/23 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:a6:34:d8:ff:9d:dd:61:62:e1:1c:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4746a92d-5f69-4264-863f-81298a3d93ed
        Validity
            Not Before: Oct 12 04:00:00 2021 GMT
            Not After : Apr 23 04:00:00 2024 GMT
        Subject: CN=1d00600b-e389-47b5-bf37-2d4571d09303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b0:df:f3:75:bf:74:3b:69:fb:82:50:44:7c:
                    00:34:be:15:3a:34:56:dd:66:4e:4d:ef:4a:41:2f:
                    7c:df:65:a0:ce:35:1b:69:f2:51:3c:79:53:64:8f:
                    a2:32:1b:57:6c:b9:2b:00:36:21:57:20:c5:c7:ee:
                    ea:ef:15:b8:3c:92:38:d8:7c:3e:d4:d6:af:70:72:
                    cd:40:b2:ba:16:9a:48:0d:36:12:39:3e:6b:1f:18:
                    b8:c0:ff:fe:ee:4b:9d:d3:0d:5f:a3:0d:eb:a9:66:
                    36:e7:e5:15:5d:6b:72:10:b0:b5:77:c7:29:dc:82:
                    22:99:d7:38:14:7a:17:98:35:77:55:29:67:cf:94:
                    fa:16:2a:0c:0c:12:48:14:5b:ab:2a:25:b4:5f:ed:
                    89:32:c9:09:09:7e:bd:9c:0a:2b:96:bc:85:2c:a3:
                    fa:56:b3:16:4d:4c:82:16:65:7b:d0:e5:7e:25:10:
                    25:df:15:38:1e:e6:3a:39:58:e5:39:91:db:f0:c2:
                    e5:ad:34:a6:ea:c1:63:93:dd:b4:b3:2a:d6:9b:ac:
                    a4:ec:e4:70:d3:59:0c:cf:e4:7f:cf:81:90:61:65:
                    e9:e2:a5:de:bf:28:0e:f3:ca:d5:69:bb:cd:b2:16:
                    68:51:18:68:2a:85:bc:6b:c5:06:ca:44:b6:98:54:
                    4c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2D:CD:BB:4F:CA:45:E1:10:27:BF:2B:4C:DF:D9:E2:4D:B6:9F:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/cf575376-bcf2-3ab5-b32f-dc001aacccd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl

            X509v3 Authority Key Identifier:
                keyid:81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b6:db:01:ec:a4:86:c7:f8:d7:3b:49:c4:46:44:2a:86:07:
         61:56:3f:da:7e:5b:db:7a:a4:5a:e4:fd:a0:3e:49:de:f9:db:
         5d:82:80:e6:18:36:0b:4e:76:78:ce:03:b4:5d:52:c6:54:b5:
         93:ef:30:b7:a3:90:65:58:ac:38:b4:3c:2d:3e:f0:ca:d3:0c:
         a4:bd:91:66:f8:8e:a1:9f:91:03:e7:27:b3:c2:f0:d8:79:1f:
         23:22:a4:6f:62:e9:70:27:3a:a8:ca:bd:e8:68:10:5e:c7:5a:
         78:a2:28:01:0a:ff:2a:d4:87:8e:20:6a:52:7a:3e:c1:ad:a3:
         0e:62:85:1c:2d:63:a9:7a:96:18:02:aa:b1:5a:7d:8d:27:f0:
         82:41:e7:13:fa:a3:4b:4f:b1:3b:a6:33:bb:b9:c0:22:4c:cb:
         5e:01:76:03:2c:21:79:78:99:57:eb:cb:91:50:62:4d:ac:ac:
         bf:28:5d:65:2a:97:cf:2a:88:20:ba:55:c5:a6:80:ad:d8:16:
         e5:db:41:7e:45:59:c5:6b:34:d7:ef:c1:3e:d3:10:de:f9:1a:
         af:b4:d6:cc:d7:95:83:50:f2:7a:2c:56:93:74:93:9a:52:09:
         f3:de:32:57:ae:c7:5b:ea:c4:64:b2:62:23:63:cb:7b:85:f7:
         8a:e7:03:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----