Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/426174cd-0b7e-3c9b-99fc-4b53fbbb933f.roa
File:                     426174cd-0b7e-3c9b-99fc-4b53fbbb933f.roa (raw, json)
Hash identifier:          ySmoRV9L0FiLq1eN6VA1j0HaQwai9uKrCmsUeqF6SdY=
Subject key identifier:   28:F1:24:3C:AC:42:E3:FD:50:C3:FE:FD:2E:46:66:45:9E:F0:58:D2
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F43285841E46E3D08E9A232E38C877280
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/426174cd-0b7e-3c9b-99fc-4b53fbbb933f.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Mon 24 Jul 2023 13:16:38 +0000
asID:                     8075
IP address blocks:        129.35.19.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:3d:08:e9:a2:32:e3:8c:87:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 24 13:16:38 2023 GMT
        Subject: CN=f07844c1-0a3a-46d9-a447-a889a5dcac59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:48:73:c2:57:b1:eb:84:b1:56:5f:fb:57:
                    89:cf:0a:e3:fc:cc:8f:64:79:39:18:92:8b:7b:85:
                    ee:d7:bd:24:e3:dd:8c:99:0f:62:cc:7c:b1:80:3e:
                    bf:25:7f:b5:b5:cb:2a:f8:42:f0:57:00:87:98:91:
                    4a:98:01:88:4b:fd:82:f1:eb:7b:ae:b9:e3:db:0f:
                    a8:5e:90:b4:0c:95:78:a4:2c:33:3f:70:ae:bd:09:
                    18:14:77:c9:f6:83:f1:cf:1d:28:26:87:b3:eb:08:
                    45:f7:dd:da:25:61:48:0b:32:db:1f:88:f6:e9:11:
                    29:6d:47:5f:aa:d3:58:78:4f:1c:31:d0:b6:80:da:
                    53:d8:36:0d:e6:dd:40:25:cc:22:94:1d:ec:f1:0f:
                    54:23:a8:f5:45:18:14:3e:fd:ba:aa:b0:cf:e1:d7:
                    1d:ad:7b:47:c4:27:43:1b:71:6b:68:28:38:f6:54:
                    41:c4:01:e5:3f:99:4e:67:d0:ab:e0:c1:31:65:93:
                    19:31:45:54:d7:22:07:7b:17:81:b0:88:0b:8a:3d:
                    7a:06:34:61:49:1a:0b:1c:66:b8:a6:70:43:39:d2:
                    ae:d1:57:ef:9a:1e:33:a3:98:b8:4a:3b:01:55:d1:
                    a6:d0:c0:9b:6a:ea:12:83:2c:c8:83:b6:51:3c:02:
                    fa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F1:24:3C:AC:42:E3:FD:50:C3:FE:FD:2E:46:66:45:9E:F0:58:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/426174cd-0b7e-3c9b-99fc-4b53fbbb933f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.35.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a4:c8:c2:ae:f5:82:ae:56:80:e9:ab:22:f1:5f:c2:3b:1f:
         f7:f4:8b:d2:c1:dc:b7:b7:3f:79:97:c2:f9:25:bc:71:9a:fa:
         fd:62:d5:32:92:f6:fa:94:3f:eb:79:f9:d4:cd:da:68:8d:f4:
         9e:57:bc:cc:06:14:0c:44:1f:d2:75:a5:95:1a:73:3d:c9:c5:
         97:d7:75:27:fc:15:43:71:a1:92:10:fb:41:fb:f6:74:98:08:
         15:e5:71:c4:5d:5e:a7:7c:a7:74:04:9c:9b:cf:02:bb:f0:b1:
         85:fe:38:9f:aa:60:68:22:f3:f1:c1:58:b1:23:76:a0:d9:e5:
         f9:40:68:90:cc:9e:74:b4:c7:6f:61:c9:2a:cb:c3:d0:d4:a6:
         fa:17:d3:a7:e9:d8:e9:34:33:65:98:e3:cb:f5:a9:82:57:b4:
         95:3d:83:56:75:09:f7:8e:25:6e:b9:d3:19:86:36:7f:12:a3:
         82:db:2d:8a:77:08:e1:d8:26:f9:00:5d:51:5e:8d:ef:77:b0:
         ea:e3:7b:b2:e9:1f:bc:ec:38:97:39:09:5e:62:a4:f2:03:4c:
         a9:3c:8d:dd:db:ea:88:13:81:54:bd:12:2e:60:0a:f8:aa:c3:
         fb:67:32:3c:52:50:c8:9a:82:a5:0e:7f:d0:d7:2f:ea:91:f6:
         24:4d:20:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----