Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/468b8951-faeb-3dc3-b0f7-b1e8573e3e23.roa
File:                     468b8951-faeb-3dc3-b0f7-b1e8573e3e23.roa (raw, json)
Hash identifier:          uSg2CXee04hRYGpHtirX7Akxna3zCfi9C7Ytm0kAlRs=
Subject key identifier:   A7:A4:B2:D1:3F:E2:DC:2A:99:A6:2D:D8:EE:77:9F:0E:5D:29:5B:33
Certificate issuer:       /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial:       010D0C9F4328583E15AE85FD0120D72B4A76A480
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/468b8951-faeb-3dc3-b0f7-b1e8573e3e23.roa
Signing time:             Tue 31 May 2022 12:24:07 +0000
ROA not before:           Tue 31 May 2022 12:24:07 +0000
ROA not after:            Mon 02 Sep 2024 04:00:00 +0000
asID:                     3356
IP address blocks:        23.131.190.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:15:ae:85:fd:01:20:d7:2b:4a:76:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
        Validity
            Not Before: May 31 12:24:07 2022 GMT
            Not After : Sep  2 04:00:00 2024 GMT
        Subject: CN=9f0422d8-991f-4fe1-8490-3a859f744a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:33:84:30:4a:de:24:41:2c:f8:0e:2b:6f:c8:
                    05:32:d5:74:8b:b0:54:90:63:ed:d3:ba:57:2e:4b:
                    a8:98:48:f7:cd:f9:b9:96:cd:ac:3d:99:ab:cb:2d:
                    07:95:e4:bb:7a:62:d3:50:8b:53:fc:37:71:31:39:
                    da:c1:2e:ca:a0:c8:36:35:17:70:c9:1c:b3:14:cc:
                    af:34:9e:79:9f:4b:e9:a0:3d:bd:1b:cf:5f:37:4e:
                    7b:ea:b0:40:7e:08:3b:fe:8f:96:bf:0d:b8:3f:86:
                    93:bc:4b:cf:59:03:c6:85:a3:95:e5:fa:65:49:aa:
                    6f:bc:b4:b8:94:3c:e3:96:d9:e3:f9:f6:d6:c1:c1:
                    3a:24:c5:e7:1e:61:94:78:bf:bd:da:90:ab:69:59:
                    da:c0:e3:f2:53:7a:74:c7:f8:8b:3a:d0:c6:6f:3b:
                    bd:f0:56:3a:fd:d3:b8:5b:c7:94:0b:fd:20:5e:b5:
                    3b:19:c3:02:9b:0b:71:f2:e7:af:26:8a:5b:84:3a:
                    de:0a:e3:71:ba:c2:91:d8:80:07:0c:64:40:39:ee:
                    22:43:bf:90:91:3e:de:ce:84:35:32:f1:07:d6:29:
                    26:37:00:cc:40:68:07:83:fd:a4:9b:c7:5d:33:8d:
                    cf:db:02:d4:25:88:1c:f8:1b:1d:34:2f:14:b1:9b:
                    73:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A4:B2:D1:3F:E2:DC:2A:99:A6:2D:D8:EE:77:9F:0E:5D:29:5B:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/468b8951-faeb-3dc3-b0f7-b1e8573e3e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl

            X509v3 Authority Key Identifier:
                keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a1:39:f5:a3:1a:0d:1b:aa:22:6d:3a:ce:4c:9c:83:15:3f:
         1a:e1:6e:c5:c9:bc:0c:ba:7d:77:ad:19:c0:b9:25:71:d2:01:
         7c:b4:1a:ef:09:a9:98:2d:94:af:48:bc:ce:14:5b:d3:d3:87:
         b4:49:1f:ea:b3:90:c0:05:0d:30:b6:0e:2f:b0:8b:89:a1:14:
         51:36:f3:99:4e:74:10:e6:f4:d3:a3:4e:09:d9:55:78:ad:6a:
         86:3d:28:14:b8:63:17:7b:aa:89:f2:80:d7:e0:14:34:f5:1a:
         ff:2d:62:11:1c:09:68:a9:8b:ee:31:ee:41:d7:91:26:c6:cf:
         5a:28:8a:64:89:d6:b0:40:0d:16:cc:5b:e1:7b:ad:e2:9c:4b:
         29:86:23:64:d8:cc:10:99:98:82:ce:52:38:72:b5:49:10:28:
         24:05:ce:5c:5d:2f:f3:6b:f1:19:40:f4:d0:67:f0:d9:27:a1:
         f3:c8:99:63:07:f4:c7:28:8b:ed:63:47:17:85:91:64:44:16:
         ae:7a:b4:6e:e6:fa:b9:cc:f4:32:53:6b:67:c7:56:23:00:b6:
         71:61:8b:ff:78:b7:a0:47:c0:3a:f3:8b:a5:d0:8c:b1:1c:77:
         4b:e8:59:96:31:bb:8d:f3:91:3f:ba:e3:93:2b:ac:77:9c:7a:
         9f:f7:7a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----