Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3bcbb5d2-21b2-3c65-8fdd-737c69e4535b.roa
File:                     3bcbb5d2-21b2-3c65-8fdd-737c69e4535b.roa (raw, json)
Hash identifier:          jc7kc4EPSvvuHIWlEHSjI/MU5DTNnEYLCcJSi+jFowg=
Subject key identifier:   B2:84:37:3D:19:82:A5:83:4A:F7:97:88:A0:83:92:F4:F3:5A:EE:61
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583E3E797E78DC37225CC381AB40
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3bcbb5d2-21b2-3c65-8fdd-737c69e4535b.roa
Signing time:             Tue 14 Jun 2022 12:00:00 +0000
ROA not before:           Tue 14 Jun 2022 12:00:00 +0000
ROA not after:            Thu 15 Jun 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3e:79:7e:78:dc:37:22:5c:c3:81:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jun 14 12:00:00 2022 GMT
            Not After : Jun 15 04:00:00 2023 GMT
        Subject: CN=9849ccad-2e47-435d-80a3-69009cc89a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:c0:96:c4:44:ef:36:da:cd:f6:98:f1:e1:
                    61:de:c4:88:11:d3:37:c7:ff:43:d6:93:9b:72:37:
                    7d:04:5a:ce:6b:4f:76:88:20:44:8d:05:1a:12:08:
                    4a:ee:b0:4c:5a:d9:7a:b5:93:65:a7:1f:23:78:0b:
                    f3:41:26:d0:a5:3a:6d:89:a3:ec:de:57:3a:9d:f0:
                    15:93:c5:70:23:dd:96:51:37:c5:93:12:6f:c9:2c:
                    78:20:89:91:8c:c2:51:4e:09:42:d9:13:db:dc:9a:
                    d1:7d:3d:b7:58:e4:b3:a5:0b:54:78:24:30:12:3f:
                    aa:ce:fa:15:d9:81:d8:56:49:bc:b2:66:1a:83:1b:
                    95:4a:87:3c:b6:d6:15:5d:6a:37:db:43:d4:ad:65:
                    72:6e:4e:8f:b6:1f:1e:8e:b6:13:98:9b:a3:2f:11:
                    33:5d:f5:10:6c:18:db:82:a2:2f:7f:07:dc:b7:08:
                    81:72:a7:67:a8:ef:56:49:6e:5c:08:db:6e:2e:19:
                    d5:3c:2d:b7:32:18:ee:ea:7c:be:31:cd:a9:d8:3c:
                    95:54:77:c3:a2:94:7b:3d:01:5e:3c:e9:a8:11:f0:
                    dd:27:0a:01:24:5e:9e:c1:c6:3c:b3:f6:b9:48:26:
                    5f:94:94:46:77:c3:1b:7b:f1:a8:5e:0d:39:03:5f:
                    74:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:84:37:3D:19:82:A5:83:4A:F7:97:88:A0:83:92:F4:F3:5A:EE:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3bcbb5d2-21b2-3c65-8fdd-737c69e4535b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6b:2f:7b:e1:1b:8f:be:94:2c:95:83:2e:9f:4e:84:4f:6e:
         a0:3d:ce:fa:ae:b5:0d:00:78:67:4b:c9:37:cc:d7:29:78:9e:
         c1:fa:47:ff:ca:df:18:27:e6:2e:ea:f8:9b:98:ba:75:3e:30:
         2a:ac:ed:2f:e2:6a:32:d6:8d:9c:aa:10:e4:68:3e:89:78:cf:
         cd:53:a6:c3:02:49:06:e6:02:ef:b0:68:a5:68:b2:e2:a7:81:
         8e:55:b8:d8:6d:14:ee:ca:f6:77:ba:2a:5c:36:74:82:42:77:
         41:48:bf:5f:d1:bf:ed:17:fa:82:64:cb:a6:f8:08:cc:7a:55:
         40:1e:38:eb:29:a3:b9:a5:66:9e:20:de:6e:54:75:7a:42:d0:
         ff:4f:8c:6c:51:40:76:99:7b:92:6d:68:26:33:85:cb:04:13:
         7a:5e:d1:39:7b:9b:62:3a:21:4d:a2:89:a2:6c:8c:a4:08:b5:
         6d:6e:fe:e7:84:69:ec:f8:3a:c5:25:09:b0:a9:81:2a:8b:ad:
         11:7c:6b:55:3a:3a:0a:7d:96:f9:5a:4b:ce:e1:3f:ee:24:26:
         b0:73:31:a6:a6:01:28:0d:ec:e1:2b:a6:d3:d4:18:dd:4b:5d:
         7a:a0:f2:12:32:0d:4e:43:96:95:af:e4:49:7e:ff:30:06:b8:
         b1:b3:d4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----