Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/9f9ab438-3f4e-37bf-836a-8b482c5e61c6.roa
File:                     9f9ab438-3f4e-37bf-836a-8b482c5e61c6.roa (raw, json)
Hash identifier:          QkjBuBz15syWd/J1Zcus0HPfKfJcLDNg38QKpSfSeLw=
Subject key identifier:   89:E9:4E:CE:BC:1D:F2:BA:2D:11:1D:B8:0B:A2:03:9C:4D:B5:C5:8B
Certificate issuer:       /CN=81fb7701-7454-4b9b-810d-3d604f504467
Certificate serial:       010D0C9F43285845BA7E2A11F49F8E3A28D33620
Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/9f9ab438-3f4e-37bf-836a-8b482c5e61c6.roa
Signing time:             Wed 01 May 2024 13:00:34 +0000
ROA not before:           Wed 01 May 2024 13:00:34 +0000
ROA not after:            Tue 30 Jul 2024 13:00:34 +0000
asID:                     8075
IP address blocks:        199.65.240.0/20 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:7e:2a:11:f4:9f:8e:3a:28:d3:36:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467
        Validity
            Not Before: May  1 13:00:34 2024 GMT
            Not After : Jul 30 13:00:34 2024 GMT
        Subject: CN=5c922983-5682-4931-98ff-785f537c6f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:e6:17:cd:8e:23:eb:18:a6:6f:be:2b:69:
                    66:0b:53:ce:d4:91:7d:7f:67:1b:70:3f:f7:36:b4:
                    c8:7e:66:9f:90:68:2d:27:dd:78:f0:02:3d:08:95:
                    de:84:e2:26:cf:ee:3a:0f:27:85:88:40:69:d7:10:
                    71:38:c4:39:2e:d1:58:fd:37:7c:3a:55:7c:68:12:
                    cb:90:d1:65:e6:f1:dc:c8:39:b3:9b:89:7c:2c:06:
                    28:cc:31:8a:00:67:b3:db:bc:50:1a:a6:63:1e:93:
                    0c:3c:8f:48:cc:ab:32:23:6b:07:11:04:5f:b2:a6:
                    b9:08:18:36:e6:38:a0:79:10:4f:b9:06:50:92:b8:
                    f9:f4:2d:7e:0a:37:57:a5:01:f9:68:43:b9:f8:a7:
                    d5:8d:ff:ef:40:67:ae:00:9f:2c:2a:18:ba:c5:5d:
                    8e:d8:a0:c1:9d:dc:83:a6:f2:29:13:07:f4:f6:84:
                    76:5b:39:50:d5:10:8c:9f:e0:85:53:32:de:3b:18:
                    e5:d9:ac:35:39:b4:11:86:f0:99:32:0f:23:b7:f6:
                    10:bc:99:f7:63:ec:e3:bf:98:b0:88:22:8f:cd:f8:
                    11:1f:73:51:a4:e6:c4:da:73:95:36:21:2d:d7:11:
                    38:62:93:7b:e6:e4:fa:b7:fc:c7:1d:cb:9b:90:50:
                    41:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E9:4E:CE:BC:1D:F2:BA:2D:11:1D:B8:0B:A2:03:9C:4D:B5:C5:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/9f9ab438-3f4e-37bf-836a-8b482c5e61c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl

            X509v3 Authority Key Identifier:
                keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f3:f1:ff:e5:f7:63:d8:61:84:16:e3:41:59:72:1c:1b:11:
         3f:b7:28:6c:2a:b5:d6:8f:7a:ea:a8:66:0f:42:e4:ca:e5:18:
         31:42:d4:a5:b5:0a:7c:53:cf:d3:b8:5b:cb:77:d5:3b:89:87:
         f9:c5:48:ba:ed:d4:11:3d:9e:4e:98:21:bc:4c:e8:2e:2d:c8:
         5a:47:e8:cf:e2:f6:1b:3c:20:b8:dd:ca:18:7b:44:50:6e:45:
         62:65:d0:81:29:eb:1e:32:89:81:55:26:a8:d1:40:71:ba:f9:
         3e:d2:53:a0:4a:82:f4:14:66:15:4d:51:b7:0f:e1:31:e9:6a:
         70:89:63:91:86:d8:f6:23:cd:18:c6:b9:49:aa:2b:cb:0f:22:
         55:d4:5d:e6:99:b2:cb:1a:2e:1a:da:9a:93:8c:a3:d7:ba:d3:
         ed:38:11:ca:c0:4d:b7:5d:dc:03:26:bf:51:f7:f9:1a:ea:6c:
         e5:5d:73:9e:9e:31:db:df:85:1d:85:d3:ef:8c:a6:b3:17:ab:
         5b:45:28:d6:06:ec:04:19:67:68:b9:b6:92:e2:59:b2:55:08:
         44:28:6b:97:ad:4e:23:7d:63:52:73:49:61:25:90:12:0d:fd:
         10:d2:b1:17:9c:a3:88:53:46:79:85:7a:70:b6:f6:e9:54:9c:
         66:f8:aa:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEW6fioR9J+OOijTNiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0
NDY3MB4XDTI0MDUwMTEzMDAzNFoXDTI0MDczMDEzMDAzNFowLzEtMCsGA1UEAxMk
NWM5MjI5ODMtNTY4Mi00OTMxLTk4ZmYtNzg1ZjUzN2M2ZjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJHmF82OI+sYpm++K2lmC1PO1JF9f2cbcD/3
NrTIfmafkGgtJ9148AI9CJXehOImz+46DyeFiEBp1xBxOMQ5LtFY/Td8OlV8aBLL
kNFl5vHcyDmzm4l8LAYozDGKAGez27xQGqZjHpMMPI9IzKsyI2sHEQRfsqa5CBg2
5jigeRBPuQZQkrj59C1+CjdXpQH5aEO5+KfVjf/vQGeuAJ8sKhi6xV2O2KDBndyD
pvIpEwf09oR2WzlQ1RCMn+CFUzLeOxjl2aw1ObQRhvCZMg8jt/YQvJn3Y+zjv5iw
iCKPzfgRH3NRpObE2nOVNiEt1xE4YpN75uT6t/zHHcubkFBBvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFInpTs68HfK6LREduAuiA5xNtcWLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MWZi
NzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvOWY5YWI0MzgtM2Y0ZS0z
N2JmLTgzNmEtOGI0ODJjNWU2MWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODFmYjc3MDEtNzQ1NC00YjliLTgx
MGQtM2Q2MDRmNTA0NDY3LzgxZmI3NzAxLTc0NTQtNGI5Yi04MTBkLTNkNjA0ZjUw
NDQ2Ny5jcmwwHwYDVR0jBBgwFoAURtoQELsDwlBDG9Mx1tammlwVCs4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYw
NGY1MDQ0NjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx0HwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/z8f/l92PYYYQW40FZchwbET+3KGwqtdaPeuqoZg9C5MrlGDFC1KW1
CnxTz9O4W8t31TuJh/nFSLrt1BE9nk6YIbxM6C4tyFpH6M/i9hs8ILjdyhh7RFBu
RWJl0IEp6x4yiYFVJqjRQHG6+T7SU6BKgvQUZhVNUbcP4THpanCJY5GG2PYjzRjG
uUmqK8sPIlXUXeaZsssaLhrampOMo9e60+04EcrATbdd3AMmv1H3+RrqbOVdc56e
MdvfhR2F0++MprMXq1tFKNYG7AQZZ2i5tpLiWbJVCEQoa5etTiN9Y1JzSWElkBIN
/RDSsReco4hTRnmFenC29ulUnGb4qmM=
-----END CERTIFICATE-----