Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/65b3b4e4-e5b9-3de5-bb8c-90f7883a4b47.roa
File:                     65b3b4e4-e5b9-3de5-bb8c-90f7883a4b47.roa (raw, json)
Hash identifier:          uK9UYa7awmw36FCBvytKpfIQkqyDiajxqbdixlebmaU=
Subject key identifier:   0F:52:12:71:AD:8C:5A:F7:E0:C8:07:B7:54:EC:39:F7:26:C0:B5:7E
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583EFBC26A626D68E8B3C3B499C0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/65b3b4e4-e5b9-3de5-bb8c-90f7883a4b47.roa
Signing time:             Sun 21 Aug 2022 12:00:00 +0000
ROA not before:           Sun 21 Aug 2022 12:00:00 +0000
ROA not after:            Tue 22 Aug 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:fb:c2:6a:62:6d:68:e8:b3:c3:b4:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Aug 21 12:00:00 2022 GMT
            Not After : Aug 22 04:00:00 2023 GMT
        Subject: CN=142bf750-353d-43bf-91fe-0ab23432d4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:40:b9:ef:b9:8e:3b:55:82:ee:45:f8:d9:
                    b0:3d:da:11:55:6a:62:14:81:ec:e3:63:45:ab:91:
                    22:7a:1b:c1:94:f1:7c:ee:42:cc:df:01:a1:c1:27:
                    f8:1f:ac:18:36:94:3d:08:20:47:f3:5f:20:36:a2:
                    55:bf:11:92:71:62:53:f8:b7:37:d0:c1:2e:75:c1:
                    a2:42:a1:14:fe:88:25:67:6f:8f:2f:d6:fc:57:61:
                    a1:c0:da:b2:04:26:30:0d:ec:17:cf:c9:9f:a5:05:
                    4c:57:d9:70:c9:90:86:ff:e6:33:61:ca:8e:87:da:
                    e8:01:3a:34:00:dc:89:b9:56:8c:4a:61:a7:ba:1b:
                    61:ed:37:d4:f1:57:0f:68:b9:46:39:2d:9b:7e:6c:
                    fe:c4:d0:40:99:bd:20:32:f1:26:54:c7:bf:d5:62:
                    c6:df:78:c3:c5:c5:98:a7:8d:58:8c:48:87:10:18:
                    e3:8a:8d:a4:87:bb:06:1e:ee:ae:d5:b8:8f:29:e3:
                    47:4d:4b:a5:a5:57:a6:80:72:5f:13:f4:c9:36:d4:
                    e7:b5:de:98:48:a2:95:7d:5d:5d:74:eb:9d:25:29:
                    c6:c7:46:e3:5b:a5:09:99:fa:47:b2:3c:f6:c3:27:
                    14:5a:be:e2:0a:26:ab:d3:0f:51:76:be:e4:7e:e6:
                    d9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:52:12:71:AD:8C:5A:F7:E0:C8:07:B7:54:EC:39:F7:26:C0:B5:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/65b3b4e4-e5b9-3de5-bb8c-90f7883a4b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f3:13:64:21:dc:e5:90:a6:d1:e5:0f:78:ad:e8:91:4f:fa:
         9b:a3:c9:2d:e7:0d:8a:2e:64:14:8d:34:62:a9:f9:ef:80:df:
         0c:66:7d:f2:9b:ce:65:24:dd:c7:62:8a:0a:a2:19:6c:ee:62:
         76:26:ed:34:aa:34:ba:05:de:e8:02:ba:9a:bd:c1:79:df:0d:
         da:f0:ef:5c:b0:15:4b:dd:dd:3f:35:31:5e:cc:ed:0f:34:d3:
         09:fc:a0:0c:ed:62:09:07:1b:79:2c:55:66:91:f4:5a:32:d6:
         28:e4:71:27:37:72:1d:75:69:6e:94:3a:e2:9e:35:c2:62:ac:
         23:1b:7b:08:a9:5c:1e:94:62:ec:61:c0:66:bb:ba:a4:2c:37:
         7e:f2:bf:3a:43:00:29:b1:c7:bf:4d:89:29:3e:a4:ca:3b:e2:
         77:32:92:91:62:34:d4:53:e5:09:fa:32:8a:a5:d5:33:9e:b4:
         64:25:41:78:dc:1c:d2:03:70:94:80:68:38:8d:c5:29:e4:49:
         ef:27:4c:68:7a:85:94:93:20:dc:62:18:49:91:bf:72:5c:20:
         37:b1:4f:c5:23:90:c2:b2:dd:b1:60:48:b1:9a:00:ba:ba:a6:
         00:7f:06:5e:48:60:29:79:f9:35:00:47:76:f1:ad:33:6e:cc:
         fd:bd:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----