Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/52228500-a8a4-314a-b497-a2d955e2f69b.roa
File:                     52228500-a8a4-314a-b497-a2d955e2f69b.roa (raw, json)
Hash identifier:          oKXQy2Bq3x5Z8Z296cmCscOPhzBURAA02yDKBxYQrZ4=
Subject key identifier:   04:F6:55:65:75:4A:C0:02:A7:20:20:C6:8A:44:C5:82:49:9B:26:B5
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583D91995755E2DA82C29F0E9B60
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/52228500-a8a4-314a-b497-a2d955e2f69b.roa
Signing time:             Thu 14 Apr 2022 04:00:00 +0000
ROA not before:           Thu 14 Apr 2022 04:00:00 +0000
ROA not after:            Fri 14 Apr 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:91:99:57:55:e2:da:82:c2:9f:0e:9b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Apr 14 04:00:00 2022 GMT
            Not After : Apr 14 04:00:00 2023 GMT
        Subject: CN=ed1c9f25-290e-4b40-b273-b8545c0b6589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:90:87:57:d6:0d:01:31:10:5b:b3:b8:2a:05:
                    c3:51:ee:bb:c6:72:0e:a9:cd:13:aa:79:76:dd:c0:
                    58:a1:fc:01:39:89:7a:e6:a2:76:24:df:e3:a4:66:
                    88:79:c6:0f:97:c2:45:3d:99:cd:74:ca:6b:a4:c1:
                    3a:b1:81:1d:74:f0:51:6d:c0:f7:10:93:35:19:e8:
                    a6:84:e8:27:8a:bc:b5:7e:d7:7b:11:ff:53:fd:15:
                    35:81:30:64:e3:05:93:aa:1c:be:c5:75:ad:ac:16:
                    72:5a:97:57:f2:a7:c5:f7:0b:5e:50:38:ac:16:fa:
                    b2:0b:f4:31:48:0a:37:9c:9c:c3:1a:20:5e:40:eb:
                    41:a9:f5:59:34:9e:aa:ab:8d:9a:1d:a2:4f:63:62:
                    45:71:fb:fe:2b:86:3e:0d:0b:8a:89:e9:bc:02:f5:
                    c1:ec:ca:90:05:11:9e:03:45:04:8d:33:38:52:44:
                    53:7c:a2:ef:22:78:89:a3:83:9a:90:da:3a:69:b9:
                    d8:c2:2e:fa:75:36:1f:6b:ed:0b:7e:11:d5:fc:7e:
                    a7:ce:19:b5:bf:10:be:54:1f:0f:9d:6b:3e:e0:8f:
                    43:09:3b:0a:af:d7:64:7b:ba:9e:ae:43:01:70:55:
                    a7:d4:db:c4:2a:34:f3:d8:1c:ce:4e:a7:0d:bd:b1:
                    87:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F6:55:65:75:4A:C0:02:A7:20:20:C6:8A:44:C5:82:49:9B:26:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/52228500-a8a4-314a-b497-a2d955e2f69b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:bf:63:5f:81:53:f3:f7:7e:f8:66:2a:86:1a:19:a0:6c:ab:
         95:2c:d0:ae:1f:9e:e9:a6:2f:9a:c8:9c:69:4b:ca:1b:0f:64:
         43:b2:26:d2:22:12:c3:a5:e4:16:fc:42:99:62:9a:a7:0c:c7:
         c5:4d:90:10:53:a2:c3:37:dc:fc:c7:35:78:d5:e7:fc:81:a5:
         e8:d7:80:02:c6:22:b1:98:99:e2:2f:57:49:c7:9e:43:80:8e:
         c1:4a:0d:c2:73:39:0f:65:91:91:7d:b7:41:81:86:33:72:c3:
         95:ec:e6:1c:f3:f0:28:a9:cb:44:a1:73:0c:47:48:50:af:a5:
         ad:53:c6:fd:64:da:6d:f3:e3:ca:b0:aa:ae:5f:12:dc:95:bf:
         2c:9b:0e:68:ab:bc:70:fd:1b:1f:72:55:68:30:4f:88:81:74:
         59:26:52:0b:1b:9f:c7:ac:ee:97:89:b2:be:e2:3a:97:c6:75:
         78:5d:96:cb:9b:33:35:07:60:c9:35:d9:31:5c:57:22:37:20:
         ea:a1:d6:aa:35:a9:ad:40:ca:9a:17:22:53:80:0d:e2:a2:8a:
         44:02:44:21:3d:1d:ac:9c:fa:ae:37:47:f6:e6:1f:d2:98:34:
         f5:22:60:f1:c8:04:37:d3:32:d8:5d:55:c4:85:d7:af:76:12:
         20:41:a0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----