Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25641a00-d095-3bd2-a089-577e54b5b44b.roa
File:                     25641a00-d095-3bd2-a089-577e54b5b44b.roa (raw, json)
Hash identifier:          d2Mbee8GXoAeWOYeaOpchg3bcZpiVypjMD0jG707SHw=
Subject key identifier:   EF:54:76:7C:75:98:C8:8E:FE:73:57:88:1B:84:52:88:6E:0A:62:98
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584790165D526A45C85BAEC48200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25641a00-d095-3bd2-a089-577e54b5b44b.roa
Signing time:             Wed 16 Oct 2024 18:01:25 +0000
ROA not before:           Wed 16 Oct 2024 18:01:25 +0000
ROA not after:            Tue 14 Jan 2025 19:01:25 +0000
asID:                     7029
IP address blocks:        24.110.32.0/19 maxlen: 24
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:90:16:5d:52:6a:45:c8:5b:ae:c4:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct 16 18:01:25 2024 GMT
            Not After : Jan 14 19:01:25 2025 GMT
        Subject: CN=cf5f5798-e31c-4c6a-af30-ef1849108aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:fb:d9:42:c8:21:34:6d:d4:ae:56:49:96:
                    7b:4e:76:06:80:8a:06:6e:3a:84:a2:f5:d4:32:d0:
                    1a:ea:55:d8:ae:2e:6e:67:83:57:32:f7:01:e6:0b:
                    a4:df:7c:31:f2:3a:b2:03:58:98:3a:c5:16:f1:8a:
                    95:20:40:6d:88:86:ec:30:9a:61:6f:d1:45:cb:62:
                    6a:87:fc:63:ce:21:f0:8f:26:39:6f:54:85:a2:6c:
                    a0:eb:2b:0c:93:c7:8c:ec:b4:c3:05:18:c9:84:2c:
                    6c:4d:8b:41:72:ed:b8:a0:cc:52:b7:09:78:d7:c0:
                    1b:4b:88:fc:c2:45:5b:2c:3c:1d:d3:ab:91:49:d6:
                    34:a2:f5:bc:c2:4a:52:31:f5:01:d0:5b:49:7a:99:
                    fe:d9:03:0a:eb:30:7b:0b:04:fa:6e:a1:b6:a9:8e:
                    1f:5b:81:ea:50:de:b6:3c:79:76:2a:6b:ca:fe:1f:
                    15:31:79:78:5f:ac:1f:f3:2a:d8:dd:07:ad:dd:b6:
                    e2:31:9f:b0:60:01:56:34:e4:36:34:c3:7f:95:f2:
                    a5:ba:9a:b4:92:40:3f:30:80:53:43:d7:0f:8f:15:
                    36:65:56:ae:ee:f7:c2:cd:99:dc:73:33:a4:27:7f:
                    e3:6e:5f:8f:1b:ba:90:d7:d9:5c:88:d9:5a:86:da:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:54:76:7C:75:98:C8:8E:FE:73:57:88:1B:84:52:88:6E:0A:62:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25641a00-d095-3bd2-a089-577e54b5b44b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.110.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:de:56:17:88:16:a7:b1:9e:55:6b:27:bd:97:48:69:30:36:
         92:f4:75:68:80:de:9c:11:8c:3e:6a:7d:d0:94:53:99:ff:63:
         fe:62:a9:d4:cb:35:4e:e6:b7:41:aa:2e:0e:5f:54:ff:81:97:
         36:ee:92:38:4c:d6:4d:23:01:50:7f:c5:bc:b8:0b:b3:da:f5:
         c9:b4:01:7b:61:08:19:b3:3b:3b:49:ea:ee:b0:b5:1d:27:25:
         97:b1:f7:a2:36:fd:ac:ab:67:4b:54:77:3a:49:d3:d4:51:df:
         7a:e7:59:ac:64:bd:d2:c6:22:f2:ac:8f:5c:f4:b4:2f:6b:e6:
         21:1b:b9:61:e5:74:70:c6:9e:7b:06:8b:59:e1:59:e3:46:55:
         36:0d:18:b6:56:4d:79:fd:0a:d0:74:e3:09:3e:70:48:dd:5c:
         31:c0:07:f9:28:56:ce:3b:fc:e2:df:b9:24:f9:8d:e8:fd:f5:
         f4:50:07:fb:00:12:4c:00:f9:26:9a:27:09:a0:54:52:cd:09:
         6a:93:9a:8a:b9:b7:ed:19:3e:02:af:a2:72:57:c2:02:60:b4:
         40:6c:6d:49:2b:68:6a:9c:ba:9c:e4:34:e3:5d:73:6b:ae:d1:
         5a:a4:08:a4:04:8c:11:14:fd:31:85:29:52:70:cc:73:2a:37:
         28:99:58:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----