Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13176cf0-4aa5-3599-8a41-1fdb64e3986b.roa
File:                     13176cf0-4aa5-3599-8a41-1fdb64e3986b.roa (raw, json)
Hash identifier:          qNN9OKUd+ZlgI8obht+pDD01zy2/2pnyhr6+YEeGu2g=
Subject key identifier:   5F:9D:1E:99:81:44:61:BB:D4:AD:CD:C6:CB:6D:B3:A8:03:AD:40:D6
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285845533323EFF194A4AFF1AEF700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13176cf0-4aa5-3599-8a41-1fdb64e3986b.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        209.92.140.0/22 maxlen: 22

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:23:ef:f1:94:a4:af:f1:ae:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=d77ab3e6-1461-4395-a0ec-2169f2a03e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:86:91:d8:11:29:3f:97:23:82:d9:c4:dc:c4:
                    c5:2c:c8:29:87:f0:5a:52:21:fa:18:b9:14:80:8a:
                    9c:8e:d6:22:1a:77:6c:5f:af:7c:42:70:6b:a3:94:
                    82:33:69:73:da:97:cb:2c:60:be:9d:dd:66:ad:ce:
                    ca:48:84:af:81:38:96:82:42:2a:54:cd:cf:21:4f:
                    68:f4:83:61:22:6c:a9:dc:e0:ad:7c:71:43:fa:91:
                    51:70:72:c1:8e:b5:01:ec:81:2d:98:ef:64:ea:a5:
                    30:24:06:84:b3:79:de:24:fd:76:95:be:38:0a:dd:
                    f6:6f:86:c6:c0:c0:55:37:4e:b4:f4:6e:73:34:94:
                    e4:c2:2c:9b:bf:4b:63:bd:ce:ef:c7:c7:61:fc:2e:
                    a7:4b:4d:cf:91:b4:79:1d:a7:2e:29:2a:6d:91:da:
                    22:67:9c:1c:82:7e:a0:b4:05:ed:6b:b7:03:bb:aa:
                    05:45:51:1a:03:bf:c1:ae:bf:7f:49:83:38:1b:12:
                    ba:d6:1e:47:bf:e6:3d:2d:b1:50:f0:63:05:7d:89:
                    53:0f:c9:2d:97:a8:81:e5:86:6c:ef:af:a6:21:78:
                    f4:90:93:b8:f5:8f:cb:59:fb:ed:59:18:7b:88:f4:
                    00:e1:0b:c5:0b:2f:8a:5c:5c:e5:eb:8c:49:97:f8:
                    61:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9D:1E:99:81:44:61:BB:D4:AD:CD:C6:CB:6D:B3:A8:03:AD:40:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13176cf0-4aa5-3599-8a41-1fdb64e3986b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ba:3f:37:53:0c:e6:da:ec:61:32:13:f4:71:53:fa:44:59:
         e1:91:a3:ee:94:67:49:c0:84:6d:3e:3c:ad:51:b0:8a:c0:f8:
         05:cf:c4:8e:cd:82:be:78:a5:e2:86:24:99:c5:4f:6d:78:bb:
         3f:30:d9:32:e2:12:2b:af:be:3e:47:f0:0e:2d:c3:33:4e:48:
         5c:7f:3b:33:b2:52:36:4b:ee:f6:9a:ff:24:46:c3:cd:88:e1:
         10:37:f1:97:51:81:eb:ad:50:75:3e:b3:ad:77:9f:7a:f8:4d:
         5b:f1:10:b0:1c:9e:b1:e3:02:45:8e:15:da:08:af:5c:14:d9:
         a0:90:fa:83:15:66:b5:80:66:2c:fc:a0:56:97:f6:42:bd:ac:
         54:20:3a:7d:51:88:12:3a:5f:e9:62:cb:4f:01:09:95:6a:be:
         6f:ee:44:2e:cd:30:38:5e:5c:b8:c2:3b:69:c8:e8:ba:27:57:
         18:37:e6:86:38:a5:0d:22:ca:0d:69:ad:bf:5f:22:98:72:d4:
         e5:34:d8:8b:ee:e5:92:d4:bf:82:b5:03:56:1c:58:31:46:36:
         d6:07:2e:ae:66:5a:0c:34:20:63:e4:0b:70:06:a9:d5:60:11:
         49:95:7d:82:48:12:10:d2:23:c2:72:9e:ea:16:39:0d:a0:d6:
         34:ad:05:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----