Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3e641154-638e-3412-84ee-539aa1c5aa54.roa
File:                     3e641154-638e-3412-84ee-539aa1c5aa54.roa (raw, json)
Hash identifier:          tq8Xj4X6ezuzMBGDLwBuGvuvqPAtBcO46YXUqffI3g8=
Subject key identifier:   44:8E:AB:A5:A5:37:CD:EC:28:30:71:A7:A2:77:90:93:BC:B2:76:21
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583E5A5369E73AA9DFF968858C80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3e641154-638e-3412-84ee-539aa1c5aa54.roa
Signing time:             Fri 24 Jun 2022 12:00:00 +0000
ROA not before:           Fri 24 Jun 2022 12:00:00 +0000
ROA not after:            Sun 25 Jun 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:5a:53:69:e7:3a:a9:df:f9:68:85:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jun 24 12:00:00 2022 GMT
            Not After : Jun 25 04:00:00 2023 GMT
        Subject: CN=8d568277-7bdf-4eab-96ec-2cc4839e5c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:ff:01:b7:cd:be:ce:f4:71:0d:5a:dd:28:
                    75:a9:06:8a:1c:6a:ee:07:1f:2d:34:c7:b9:d2:e7:
                    2a:ab:46:82:f3:ef:0e:6a:c9:de:5c:8a:bf:6b:7c:
                    08:44:2c:e7:88:f3:12:b1:73:09:e9:2e:eb:b5:d3:
                    a4:40:d0:55:87:5c:0c:6c:7e:a6:d5:2b:47:05:ae:
                    fc:18:39:5c:9a:a5:21:ae:4f:b6:75:ae:7d:ec:b1:
                    06:28:3c:19:38:47:c4:f9:84:9e:85:05:0e:fc:4c:
                    4e:96:c1:cb:f0:67:e9:95:ba:33:85:ad:38:3e:d6:
                    21:70:b6:04:69:f9:82:40:0d:32:67:ac:43:64:c7:
                    86:26:d2:15:08:5a:f5:cd:22:61:3a:5d:61:28:d8:
                    2b:59:23:75:6e:44:fe:58:dd:42:c2:fd:e3:2b:72:
                    1f:bf:55:83:60:4c:fb:bb:13:80:bf:07:77:11:a5:
                    b0:02:8d:34:3c:6e:2e:12:af:15:26:64:4b:70:52:
                    6d:5b:3a:28:66:61:ec:f0:9b:a3:b1:7a:df:3f:0d:
                    7d:95:e3:85:30:58:d3:7e:cf:c2:1c:3a:a8:e8:d0:
                    7d:d3:aa:d4:2e:0d:3e:42:00:54:f7:c2:10:4e:2f:
                    1e:2a:9d:18:ce:2b:47:b8:2c:b1:11:60:82:39:7b:
                    08:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8E:AB:A5:A5:37:CD:EC:28:30:71:A7:A2:77:90:93:BC:B2:76:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/3e641154-638e-3412-84ee-539aa1c5aa54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1f:14:03:a0:ea:c5:b4:1f:86:d3:5a:9d:91:df:38:65:fb:
         dd:e9:85:f8:39:7d:e9:1f:7e:24:d9:4a:94:58:59:4d:31:3a:
         25:8c:4f:b6:a9:99:b4:99:52:bf:83:6c:5c:ae:f6:1d:a5:54:
         4e:b2:cd:60:60:d9:46:9b:4a:11:66:59:6b:ba:ff:9b:ec:71:
         d8:08:44:f9:64:33:75:f4:8d:28:d8:59:2e:43:a9:77:98:b4:
         3d:14:f5:88:c3:75:11:8f:8f:9a:a1:bd:5b:81:8c:af:f5:b6:
         66:c3:ab:a9:b9:7b:3e:79:c7:83:7c:98:c2:39:b6:ad:7a:e1:
         10:ab:0f:bc:d4:4e:63:30:f7:ca:b1:13:21:02:1e:5a:68:99:
         38:20:31:0c:e0:1e:2e:68:d2:2a:21:81:7c:60:49:67:ec:c9:
         16:ea:54:72:d8:47:17:59:27:1b:d5:3e:ea:05:5a:24:2a:de:
         44:7d:20:25:9b:f1:c6:a9:01:75:1a:26:98:29:f0:43:b0:fb:
         22:eb:8e:20:3b:93:ff:cc:ba:23:3c:77:90:9e:70:4b:27:fe:
         4f:c8:bb:3d:40:cf:05:65:b2:3d:37:cf:cd:cb:57:20:fd:1e:
         8f:b9:8f:a4:a8:6d:51:58:b7:c3:b9:af:90:1f:34:43:17:34:
         cb:11:d8:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5aU2nnOqnf+WiFjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDYyNDEyMDAwMFoXDTIzMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
OGQ1NjgyNzctN2JkZi00ZWFiLTk2ZWMtMmNjNDgzOWU1YzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreH/AbfNvs70cQ1a3Sh1qQaKHGruBx8tNMe5
0ucqq0aC8+8OasneXIq/a3wIRCzniPMSsXMJ6S7rtdOkQNBVh1wMbH6m1StHBa78
GDlcmqUhrk+2da597LEGKDwZOEfE+YSehQUO/ExOlsHL8Gfplbozha04PtYhcLYE
afmCQA0yZ6xDZMeGJtIVCFr1zSJhOl1hKNgrWSN1bkT+WN1Cwv3jK3Ifv1WDYEz7
uxOAvwd3EaWwAo00PG4uEq8VJmRLcFJtWzooZmHs8JujsXrfPw19leOFMFjTfs/C
HDqo6NB906rULg0+QgBU98IQTi8eKp0YzitHuCyxEWCCOXsIOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESOq6WlN83sKDBxp6J3kJO8snYhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvM2U2NDExNTQtNjM4ZS0z
NDEyLTg0ZWUtNTM5YWExYzVhYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4fFAOg6sW0H4bTWp2R3zhl+93phfg5fekffiTZSpRYWU0xOiWMT7ap
mbSZUr+DbFyu9h2lVE6yzWBg2UabShFmWWu6/5vscdgIRPlkM3X0jSjYWS5DqXeY
tD0U9YjDdRGPj5qhvVuBjK/1tmbDq6m5ez55x4N8mMI5tq164RCrD7zUTmMw98qx
EyECHlpomTggMQzgHi5o0iohgXxgSWfsyRbqVHLYRxdZJxvVPuoFWiQq3kR9ICWb
8capAXUaJpgp8EOw+yLrjiA7k//MuiM8d5CecEsn/k/Iuz1AzwVlsj03z83LVyD9
Ho+5j6SobVFYt8O5r5AfNEMXNMsR2Dc=
-----END CERTIFICATE-----