Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0535bf98-4b69-3acc-a360-b82816ce42b8.roa
File:                     0535bf98-4b69-3acc-a360-b82816ce42b8.roa (raw, json)
Hash identifier:          twDmL0y6zT2ESlGJ6ABTt7tgAzgc0YAOeBXRHFfEjzQ=
Subject key identifier:   06:CA:84:04:91:29:63:05:FE:D0:09:00:71:55:D3:34:49:BF:57:8E
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583D86DEB7B915608293DC312980
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0535bf98-4b69-3acc-a360-b82816ce42b8.roa
Signing time:             Sun 10 Apr 2022 04:00:00 +0000
ROA not before:           Sun 10 Apr 2022 04:00:00 +0000
ROA not after:            Mon 10 Apr 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:86:de:b7:b9:15:60:82:93:dc:31:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Apr 10 04:00:00 2022 GMT
            Not After : Apr 10 04:00:00 2023 GMT
        Subject: CN=bc222e59-1df6-4608-90e7-c18f4c7025ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:79:15:b5:e0:da:3a:c1:41:a6:65:b0:9d:
                    ee:6e:26:5d:6e:1a:99:2c:b9:f2:bf:75:c5:da:1a:
                    ea:a1:4b:7d:e4:36:3d:32:17:ed:80:cc:ff:eb:30:
                    f2:c6:0f:87:40:e5:ea:57:09:da:e2:1f:7d:9f:cc:
                    3f:21:26:3e:21:bf:8c:13:63:55:dc:2e:fd:9f:0d:
                    1b:59:66:55:a3:ab:f3:26:60:ea:31:0f:5e:ab:4f:
                    bb:03:76:f7:b6:ec:56:d6:a9:18:08:3e:70:f0:4f:
                    d1:3d:c7:3f:1e:db:d7:3e:fd:c5:ce:6d:30:8a:25:
                    3e:a2:33:eb:81:62:5c:80:d1:10:75:d3:c6:9a:69:
                    ae:6d:5b:ff:df:46:d2:d5:74:90:f7:48:14:95:20:
                    9f:cb:ce:b8:62:ae:a2:59:bb:97:45:92:9f:8e:76:
                    68:7a:c0:ba:af:b8:4d:fc:3f:59:c1:12:77:70:38:
                    50:24:1b:c9:14:78:e2:49:07:dd:1e:ee:9b:8a:53:
                    ae:4c:02:5c:06:63:b8:b9:44:13:6b:8f:73:c8:24:
                    be:f8:99:46:79:05:14:5d:28:56:6a:76:9e:95:c5:
                    28:86:0e:b3:ba:36:af:d6:27:01:97:d4:01:06:11:
                    e0:3f:0f:f0:07:c6:75:b3:38:29:25:d1:b4:68:6c:
                    40:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CA:84:04:91:29:63:05:FE:D0:09:00:71:55:D3:34:49:BF:57:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0535bf98-4b69-3acc-a360-b82816ce42b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:99:f9:9f:a7:11:df:67:4e:0a:34:bf:15:fa:61:4e:4d:37:
         20:6f:2f:af:33:22:22:10:96:04:b9:6a:1d:f5:17:16:18:a1:
         de:c9:23:a3:55:16:12:d0:09:60:43:69:f7:81:37:7a:67:c2:
         c3:1c:1a:d5:96:ae:9a:91:e7:31:ce:c1:2a:66:94:81:7d:b0:
         64:8d:f9:16:ea:7f:26:be:dd:d3:c0:1c:3c:32:1e:bd:92:74:
         03:47:aa:07:ea:34:1a:16:99:2b:21:a4:49:8c:29:94:04:f5:
         b6:0d:cf:b1:f8:b9:6d:c0:c2:8e:e6:42:8f:6d:39:d7:11:ee:
         d7:75:af:96:0a:18:bb:06:3c:14:f7:66:79:46:c6:e3:92:bb:
         3a:1f:64:b8:1b:1c:f0:ba:4e:87:4a:93:6d:72:53:92:09:31:
         bd:60:95:63:10:6c:ee:4c:a5:32:40:9f:f8:6c:aa:e7:80:cd:
         95:15:91:b3:9d:74:0a:db:94:e8:4d:70:a7:8c:f5:55:3e:d1:
         b5:03:6e:61:a8:52:78:db:16:52:3b:9b:b1:ec:49:a2:42:ba:
         69:4e:11:db:10:ea:61:00:7d:9c:e1:00:95:b7:61:13:34:9c:
         e5:83:79:6a:24:a8:31:a1:da:4a:d5:e6:65:fc:65:36:15:f6:
         69:92:f3:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2G3re5FWCCk9wxKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDQxMDA0MDAwMFoXDTIzMDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk
YmMyMjJlNTktMWRmNi00NjA4LTkwZTctYzE4ZjRjNzAyNWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m15FbXg2jrBQaZlsJ3ubiZdbhqZLLnyv3XF
2hrqoUt95DY9MhftgMz/6zDyxg+HQOXqVwna4h99n8w/ISY+Ib+ME2NV3C79nw0b
WWZVo6vzJmDqMQ9eq0+7A3b3tuxW1qkYCD5w8E/RPcc/HtvXPv3Fzm0wiiU+ojPr
gWJcgNEQddPGmmmubVv/30bS1XSQ90gUlSCfy864Yq6iWbuXRZKfjnZoesC6r7hN
/D9ZwRJ3cDhQJBvJFHjiSQfdHu6bilOuTAJcBmO4uUQTa49zyCS++JlGeQUUXShW
anaelcUohg6zujav1icBl9QBBhHgPw/wB8Z1szgpJdG0aGxAwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAbKhASRKWMF/tAJAHFV0zRJv1eOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvMDUzNWJmOTgtNGI2OS0z
YWNjLWEzNjAtYjgyODE2Y2U0MmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6Z+Z+nEd9nTgo0vxX6YU5NNyBvL68zIiIQlgS5ah31FxYYod7JI6NV
FhLQCWBDafeBN3pnwsMcGtWWrpqR5zHOwSpmlIF9sGSN+Rbqfya+3dPAHDwyHr2S
dANHqgfqNBoWmSshpEmMKZQE9bYNz7H4uW3Awo7mQo9tOdcR7td1r5YKGLsGPBT3
ZnlGxuOSuzofZLgbHPC6TodKk21yU5IJMb1glWMQbO5MpTJAn/hsqueAzZUVkbOd
dArblOhNcKeM9VU+0bUDbmGoUnjbFlI7m7HsSaJCumlOEdsQ6mEAfZzhAJW3YRM0
nOWDeWokqDGh2krV5mX8ZTYV9mmS834=
-----END CERTIFICATE-----