Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eabd221c-608d-37bc-b246-3b2a33769633.roa
File:                     eabd221c-608d-37bc-b246-3b2a33769633.roa (raw, json)
Hash identifier:          2DIT6noWRDvVRcNi1iShGJE7TaX4+nj5l2ikIZOpG7A=
Subject key identifier:   CE:CC:65:50:AC:28:1B:A5:B6:42:82:B5:6D:FB:D5:6A:C4:49:34:93
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553331F6D40AF7743A1989180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eabd221c-608d-37bc-b246-3b2a33769633.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        207.223.224.0/20 maxlen: 20

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:1f:6d:40:af:77:43:a1:98:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=f5a9fa81-bc18-4c79-91a8-82c8b023eb10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:12:dd:80:fa:26:5f:1d:b5:01:a4:85:05:
                    0f:28:e7:50:24:d4:23:17:bf:70:55:06:28:d4:0f:
                    7d:02:01:6c:a2:40:42:45:81:f3:5d:3e:55:db:05:
                    d6:8f:5e:ef:fe:2c:5f:e1:8e:a6:5c:c0:c4:17:29:
                    25:9c:6b:ee:c2:da:a9:40:0b:0e:43:97:1d:77:57:
                    b6:58:c3:a4:7c:38:74:6c:08:20:a9:d9:55:82:97:
                    0a:78:f7:11:a5:4d:97:22:6f:a1:4d:74:01:fb:6d:
                    14:a2:72:61:42:78:77:21:b5:e1:ef:33:c5:2f:2a:
                    ee:df:18:c7:38:91:29:5e:e2:1b:0d:c4:ec:04:83:
                    80:cb:68:3f:f6:d9:34:e4:88:3d:80:cc:12:f4:23:
                    35:ad:3b:20:2a:c7:9a:93:eb:bb:59:44:9b:a0:81:
                    2e:2f:ae:59:dc:97:fd:ff:ac:89:77:7b:b9:cf:ce:
                    90:c6:ad:27:d5:0d:22:64:fe:b4:d8:ea:d1:f9:1d:
                    a0:98:13:eb:e3:bb:5f:a3:b7:1a:f2:d4:b7:d5:3f:
                    67:c2:24:90:25:93:8e:a0:c0:f2:40:39:61:e0:88:
                    78:7f:a6:66:1f:78:56:d7:c5:2f:e1:9b:2b:bc:f8:
                    6e:72:b6:4e:af:30:5b:50:f7:0e:c2:f7:82:e8:8d:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CC:65:50:AC:28:1B:A5:B6:42:82:B5:6D:FB:D5:6A:C4:49:34:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eabd221c-608d-37bc-b246-3b2a33769633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.223.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:03:b9:b3:13:64:fb:9d:f6:9d:95:f0:5b:2a:4b:b4:64:88:
         55:cc:40:48:d1:13:d4:c1:ff:01:ba:29:6e:02:0f:c9:68:5a:
         04:fa:d3:ad:a0:77:d1:6f:d8:94:b0:82:59:cc:02:27:9b:9b:
         2d:df:79:c9:27:39:a0:69:6b:3b:54:56:da:d4:41:9d:a8:b4:
         58:87:a0:a6:b3:64:e9:54:a9:95:1f:71:bc:da:c8:93:58:44:
         ff:ad:2a:d5:49:61:82:04:53:5d:9a:05:2b:81:e7:d2:00:44:
         5a:af:3d:73:6d:96:54:e3:f8:e4:0e:ca:85:e5:b0:c9:71:e7:
         39:04:a1:7e:ec:76:61:ed:32:31:90:58:00:43:8a:e2:e4:4d:
         32:3b:fc:fe:26:51:69:59:19:ed:da:7a:ee:5d:b1:23:59:73:
         79:36:61:60:5e:7d:b8:52:3b:3c:22:22:9f:dd:c9:28:30:dd:
         9b:82:77:e6:a3:01:2f:2f:14:1b:db:ae:92:e0:d5:d1:13:57:
         cf:9c:98:be:c9:6f:3f:cb:7b:03:83:a7:95:bc:1f:49:84:44:
         7c:8e:15:05:27:9a:bd:bd:85:63:28:4c:b7:56:52:87:82:d9:
         78:91:ea:7f:fe:58:f9:ab:48:a1:da:12:71:a5:6d:29:d3:50:
         d1:07:50:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----