Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/caadf3b1-9d3b-3be9-a6c1-fc7c2ae7ae0c.roa
File:                     caadf3b1-9d3b-3be9-a6c1-fc7c2ae7ae0c.roa (raw, json)
Hash identifier:          i3OWjMJ7NEYUxgsI0TM7A6iovRPv7v1025cC/8ggeqk=
Subject key identifier:   84:58:25:DA:61:84:A0:9B:8A:50:DD:E9:96:84:58:C7:0E:24:EE:5C
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583F876384F1E5C0514019A64100
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/caadf3b1-9d3b-3be9-a6c1-fc7c2ae7ae0c.roa
Signing time:             Mon 10 Oct 2022 12:00:00 +0000
ROA not before:           Mon 10 Oct 2022 12:00:00 +0000
ROA not after:            Wed 11 Oct 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:87:63:84:f1:e5:c0:51:40:19:a6:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Oct 10 12:00:00 2022 GMT
            Not After : Oct 11 04:00:00 2023 GMT
        Subject: CN=8334d970-23e1-4774-b5dc-47b7ff29bcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b1:d7:6c:e9:4a:7c:aa:85:2b:50:9d:c8:b2:
                    72:cc:b5:95:48:5a:5b:1e:41:4d:ea:4b:7b:10:02:
                    ba:9b:6b:59:3c:66:bb:58:ad:8c:64:19:01:b3:a0:
                    f6:81:d3:4a:0f:ac:09:65:a4:4d:be:d2:11:d4:2e:
                    38:60:5e:3b:96:e0:30:2e:2e:17:50:c6:af:de:7d:
                    c4:e7:b1:9c:05:ad:bd:11:ce:11:37:e9:ce:0a:e3:
                    7f:b4:11:11:33:8b:f1:62:39:eb:47:03:d9:29:08:
                    fc:f1:68:69:3f:90:04:8b:cf:bd:99:33:48:94:aa:
                    c1:23:70:07:6c:ec:b9:3b:d5:79:7a:19:bf:86:20:
                    be:78:34:2e:3d:55:51:75:f2:b5:3a:13:7f:17:2d:
                    f2:0e:ea:72:4a:a7:8d:e4:90:e8:e6:9a:81:eb:6f:
                    53:7f:cf:ff:98:d8:ac:28:d8:94:8c:0d:58:25:d6:
                    a0:7b:fb:01:45:a8:10:94:14:d8:1d:04:12:10:d6:
                    7e:8f:76:5e:50:67:96:d5:08:1d:a0:bd:c4:be:b3:
                    a8:da:d1:7e:8e:53:0b:b8:85:85:04:8e:33:0f:7d:
                    9a:58:65:0e:b0:02:cc:26:34:8f:54:d1:79:0e:d1:
                    06:73:23:ee:37:08:bf:92:83:4d:0f:a1:e4:02:01:
                    a1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:58:25:DA:61:84:A0:9B:8A:50:DD:E9:96:84:58:C7:0E:24:EE:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/caadf3b1-9d3b-3be9-a6c1-fc7c2ae7ae0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:38:d9:76:ba:b4:0d:c0:10:48:ce:f1:3a:15:51:ee:c3:61:
         d7:56:e9:66:96:e3:fe:ee:9b:44:09:6e:61:26:5d:af:d1:a7:
         cb:c7:aa:8c:fa:1b:14:03:2c:5a:3f:6c:59:d7:f5:c5:b3:c7:
         fd:50:8c:1e:79:10:9e:ab:d3:30:31:80:f3:8f:33:eb:91:1f:
         bf:ed:c0:42:8d:ad:0e:f0:e7:a3:f0:3e:88:1a:39:3e:8a:76:
         e5:fe:c4:7d:dc:cc:36:04:7c:54:0a:51:8c:30:08:2c:a8:b8:
         78:47:0d:c9:63:e2:e7:9e:18:09:a4:01:08:cb:bf:2e:28:22:
         87:90:3e:93:4b:cb:9d:55:42:42:0c:20:ae:f5:11:ca:fa:24:
         e1:b7:1f:80:ae:1c:89:88:56:bb:2b:29:4a:db:8d:ae:21:8c:
         82:38:df:d3:27:78:4e:76:ae:f8:67:07:e3:24:33:7e:fc:87:
         85:4a:72:ba:27:eb:b5:28:29:8b:7b:75:d1:48:27:00:5a:a0:
         14:7e:98:df:35:2e:fc:69:41:0d:a3:a1:4a:d7:e5:2c:50:eb:
         b7:83:1b:03:ef:ba:b8:28:95:b1:de:53:ae:41:b8:d3:0a:d9:
         fc:0d:a3:aa:ec:96:91:fd:3d:b5:e5:8e:a1:62:56:55:d3:b8:
         d2:b1:cb:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+HY4Tx5cBRQBmmQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMTAxMDEyMDAwMFoXDTIzMTAxMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODMzNGQ5NzAtMjNlMS00Nzc0LWI1ZGMtNDdiN2ZmMjliY2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bHXbOlKfKqFK1CdyLJyzLWVSFpbHkFN6kt7
EAK6m2tZPGa7WK2MZBkBs6D2gdNKD6wJZaRNvtIR1C44YF47luAwLi4XUMav3n3E
57GcBa29Ec4RN+nOCuN/tBERM4vxYjnrRwPZKQj88WhpP5AEi8+9mTNIlKrBI3AH
bOy5O9V5ehm/hiC+eDQuPVVRdfK1OhN/Fy3yDupySqeN5JDo5pqB629Tf8//mNis
KNiUjA1YJdage/sBRagQlBTYHQQSENZ+j3ZeUGeW1QgdoL3EvrOo2tF+jlMLuIWF
BI4zD32aWGUOsALMJjSPVNF5DtEGcyPuNwi/koNND6HkAgGhTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRYJdphhKCbilDd6ZaEWMcOJO5cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvY2FhZGYzYjEtOWQzYi0z
YmU5LWE2YzEtZmM3YzJhZTdhZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA842Xa6tA3AEEjO8ToVUe7DYddW6WaW4/7um0QJbmEmXa/Rp8vHqoz6
GxQDLFo/bFnX9cWzx/1QjB55EJ6r0zAxgPOPM+uRH7/twEKNrQ7w56PwPogaOT6K
duX+xH3czDYEfFQKUYwwCCyouHhHDclj4ueeGAmkAQjLvy4oIoeQPpNLy51VQkIM
IK71Ecr6JOG3H4CuHImIVrsrKUrbja4hjII439MneE52rvhnB+MkM378h4VKcron
67UoKYt7ddFIJwBaoBR+mN81LvxpQQ2joUrX5SxQ67eDGwPvurgolbHeU65BuNMK
2fwNo6rslpH9PbXljqFiVlXTuNKxyzI=
-----END CERTIFICATE-----