Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5/d430ab71-1e9e-3c61-abfc-1b3643ab5ee8.roa
File:                     d430ab71-1e9e-3c61-abfc-1b3643ab5ee8.roa (raw, json)
Hash identifier:          4ejcJCa1hKeYW9nUym1J0r7weKgmyloHssaItTN9nSE=
Subject key identifier:   CF:D5:A5:32:51:6F:89:B9:E0:70:90:4B:B9:CA:E2:A3:E4:56:63:1C
Certificate issuer:       /CN=c9b25b49-5563-464e-8e82-a149898329f5
Certificate serial:       010D0C9F4328583CED99411359A97BD5F61CDD60
Authority key identifier: DD:2A:1C:AF:F1:17:17:D4:F7:08:B8:28:BB:39:8E:D0:6E:70:7E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5/d430ab71-1e9e-3c61-abfc-1b3643ab5ee8.roa
Signing time:             Mon 10 Jan 2022 05:00:00 +0000
ROA not before:           Mon 10 Jan 2022 05:00:00 +0000
ROA not after:            Mon 19 May 2025 04:00:00 +0000
asID:                     396356
IP address blocks:        216.170.122.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ed:99:41:13:59:a9:7b:d5:f6:1c:dd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9b25b49-5563-464e-8e82-a149898329f5
        Validity
            Not Before: Jan 10 05:00:00 2022 GMT
            Not After : May 19 04:00:00 2025 GMT
        Subject: CN=5c925535-7fff-4d10-80e2-85ed49127caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9c:16:cc:7e:54:78:67:11:31:80:b4:d9:72:
                    e7:59:7d:1d:08:af:e7:d9:9c:cf:70:e4:9a:78:8b:
                    2e:70:a4:10:8d:a9:43:50:2d:a6:ac:e1:17:13:f7:
                    e6:7a:b2:35:ea:0a:59:37:9c:d8:8f:2f:bd:48:84:
                    a5:ee:2d:c3:e7:b4:a8:c9:41:e3:dc:48:64:ae:d3:
                    f5:4c:e5:52:f8:51:88:eb:07:83:27:f8:7d:e4:88:
                    16:98:6e:2c:63:f9:57:3d:16:cc:b5:8d:a2:ea:ee:
                    73:ca:67:8c:e3:56:10:05:aa:70:ca:43:21:56:48:
                    86:04:37:19:26:15:ff:c5:68:ca:61:da:d1:17:95:
                    a0:32:5b:08:bd:e6:9a:e6:ea:13:82:62:10:11:d3:
                    c9:40:e3:bb:34:af:8c:2a:64:15:d9:27:45:49:61:
                    a9:4d:65:41:2d:74:57:b1:03:3d:e6:21:08:46:65:
                    73:a4:d1:cd:f7:d5:e6:c0:f1:03:11:b3:67:bf:11:
                    93:3f:ca:21:93:da:74:01:d5:12:e9:bd:e2:8f:73:
                    b6:86:93:a8:ea:0f:63:24:a4:83:69:5b:81:9e:3e:
                    1d:a8:d2:7a:60:62:e2:ad:f8:cc:d8:04:f9:21:05:
                    af:45:6d:5e:03:bd:5e:ee:11:25:a3:85:d1:45:4c:
                    c1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D5:A5:32:51:6F:89:B9:E0:70:90:4B:B9:CA:E2:A3:E4:56:63:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5/d430ab71-1e9e-3c61-abfc-1b3643ab5ee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5/c9b25b49-5563-464e-8e82-a149898329f5.crl

            X509v3 Authority Key Identifier:
                keyid:DD:2A:1C:AF:F1:17:17:D4:F7:08:B8:28:BB:39:8E:D0:6E:70:7E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c9b25b49-5563-464e-8e82-a149898329f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.170.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:87:2a:85:fe:4b:32:c8:66:37:39:8f:6d:51:2a:25:85:3c:
         cb:9d:3d:21:23:23:71:20:7f:e7:0e:7b:1b:7d:2b:87:da:cc:
         35:0a:49:ac:02:af:52:90:80:d3:d4:1d:51:50:1e:f3:f8:9e:
         e9:af:b0:13:e4:c7:6b:0a:95:dd:cb:31:40:9b:22:93:d6:94:
         3a:5e:b0:b7:b9:92:6e:51:76:f6:80:aa:8d:27:3e:5a:a1:ee:
         f2:4b:c4:eb:31:1a:ee:21:9a:4e:a8:19:38:3c:3a:19:4b:5c:
         29:7b:c9:eb:d1:7d:f8:84:1f:78:f6:47:c9:4f:7d:a0:d9:9c:
         ea:23:9e:9e:3d:61:9c:95:83:2a:49:9f:e0:26:98:f7:7c:92:
         a9:3f:b8:12:3a:ee:7f:71:c4:03:af:ce:2a:cc:f1:22:67:3e:
         e4:92:8c:d0:43:f8:28:8b:0c:8a:16:1a:5e:7e:a2:1b:f2:0a:
         95:fa:bf:9c:5d:63:e8:54:89:f6:80:d7:72:a3:5f:37:35:8c:
         e7:eb:28:b9:9d:27:53:25:b9:47:23:b3:2a:d7:ca:5a:d5:13:
         f9:1f:14:7d:a8:e9:4a:e4:b9:93:5b:14:9a:38:ae:40:79:76:
         5d:3a:3a:e9:a1:bb:3d:7c:ae:62:ef:49:e0:9c:77:61:57:79:
         5b:ac:f0:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDztmUETWal71fYc3WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzliMjViNDktNTU2My00NjRlLThlODItYTE0OTg5ODMy
OWY1MB4XDTIyMDExMDA1MDAwMFoXDTI1MDUxOTA0MDAwMFowLzEtMCsGA1UEAxMk
NWM5MjU1MzUtN2ZmZi00ZDEwLTgwZTItODVlZDQ5MTI3Y2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJwWzH5UeGcRMYC02XLnWX0dCK/n2ZzPcOSa
eIsucKQQjalDUC2mrOEXE/fmerI16gpZN5zYjy+9SISl7i3D57SoyUHj3EhkrtP1
TOVS+FGI6weDJ/h95IgWmG4sY/lXPRbMtY2i6u5zymeM41YQBapwykMhVkiGBDcZ
JhX/xWjKYdrRF5WgMlsIveaa5uoTgmIQEdPJQOO7NK+MKmQV2SdFSWGpTWVBLXRX
sQM95iEIRmVzpNHN99XmwPEDEbNnvxGTP8ohk9p0AdUS6b3ij3O2hpOo6g9jJKSD
aVuBnj4dqNJ6YGLirfjM2AT5IQWvRW1eA71e7hElo4XRRUzBsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM/VpTJRb4m54HCQS7nK4qPkVmMcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jOWIy
NWI0OS01NTYzLTQ2NGUtOGU4Mi1hMTQ5ODk4MzI5ZjUvZDQzMGFiNzEtMWU5ZS0z
YzYxLWFiZmMtMWIzNjQzYWI1ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzliMjViNDktNTU2My00NjRlLThl
ODItYTE0OTg5ODMyOWY1L2M5YjI1YjQ5LTU1NjMtNDY0ZS04ZTgyLWExNDk4OTgz
MjlmNS5jcmwwHwYDVR0jBBgwFoAU3Socr/EXF9T3CLgouzmO0G5wfkgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jOWIyNWI0OS01NTYzLTQ2NGUtOGU4Mi1hMTQ5
ODk4MzI5ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Kp6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACuHKoX+SzLIZjc5j21RKiWFPMudPSEjI3Egf+cOext9K4fazDUKSawC
r1KQgNPUHVFQHvP4numvsBPkx2sKld3LMUCbIpPWlDpesLe5km5RdvaAqo0nPlqh
7vJLxOsxGu4hmk6oGTg8OhlLXCl7yevRffiEH3j2R8lPfaDZnOojnp49YZyVgypJ
n+AmmPd8kqk/uBI67n9xxAOvzirM8SJnPuSSjNBD+CiLDIoWGl5+ohvyCpX6v5xd
Y+hUifaA13KjXzc1jOfrKLmdJ1MluUcjsyrXylrVE/kfFH2o6UrkuZNbFJo4rkB5
dl06Oumhuz18rmLvSeCcd2FXeVus8OU=
-----END CERTIFICATE-----