Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d7112c04-fd6e-36b7-a950-fddc22ce1a5f.roa
File:                     d7112c04-fd6e-36b7-a950-fddc22ce1a5f.roa (raw, json)
Hash identifier:          6a2ojnWykUVgJHpqDfD+SYKplMuj0adzR/lCXic/u6w=
Subject key identifier:   99:4F:F8:86:38:D5:49:27:AB:1B:C1:25:D7:DA:87:D5:78:B3:0E:76
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583E3B6F6A5189E71870DA647D00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d7112c04-fd6e-36b7-a950-fddc22ce1a5f.roa
Signing time:             Mon 13 Jun 2022 12:00:00 +0000
ROA not before:           Mon 13 Jun 2022 12:00:00 +0000
ROA not after:            Wed 14 Jun 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3b:6f:6a:51:89:e7:18:70:da:64:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jun 13 12:00:00 2022 GMT
            Not After : Jun 14 04:00:00 2023 GMT
        Subject: CN=af8fa3c4-6dc5-4e09-a39f-fba3ef73c598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:46:a2:34:8e:85:ce:77:fd:cd:40:16:d4:71:
                    29:96:62:9c:94:e1:86:b2:72:0f:79:3d:5c:d2:83:
                    4e:18:7e:eb:e2:a5:ec:d9:2a:54:88:af:74:de:70:
                    d2:a7:7b:b9:30:50:6b:5d:89:60:dd:be:52:40:d2:
                    a7:b9:45:b9:c0:28:3c:1a:09:bc:ad:03:b2:61:29:
                    ea:ff:c0:63:c0:63:69:50:0e:90:04:f0:93:fb:ab:
                    15:fc:5d:9d:9a:cf:b0:d5:a9:00:ce:a1:fa:20:b6:
                    ed:e4:b2:e3:8b:4b:ea:8d:98:0a:a2:d2:d3:a2:58:
                    53:4d:95:a4:b6:37:84:85:37:b3:14:6c:29:17:5f:
                    99:a9:4d:5d:19:65:09:69:5f:4b:86:be:62:a1:3f:
                    bb:3b:a9:26:92:fd:8a:35:69:6f:79:73:d6:be:e5:
                    b2:4e:c8:da:ae:3d:42:e7:45:10:d5:e3:0a:a1:45:
                    0f:d2:54:c7:65:6d:0c:d0:bd:cb:0b:51:12:c2:45:
                    bb:07:36:fd:d2:85:cf:fa:8a:a9:8c:72:57:48:48:
                    83:f1:7a:56:d2:05:72:3f:ca:52:50:8f:d5:16:99:
                    aa:da:2b:6d:c9:c0:f9:b8:ff:73:02:5a:fd:63:65:
                    cf:26:7a:40:fc:9e:54:46:ad:ed:ea:bb:bf:0d:ff:
                    7f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4F:F8:86:38:D5:49:27:AB:1B:C1:25:D7:DA:87:D5:78:B3:0E:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d7112c04-fd6e-36b7-a950-fddc22ce1a5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ca:31:bc:0b:88:cd:4a:95:9e:93:b2:52:11:d6:68:3f:0c:
         6b:3d:0a:f1:ee:68:60:86:98:d9:31:b6:8c:12:25:5d:84:be:
         29:05:62:d4:bc:66:cc:18:06:4b:eb:24:c4:e5:2c:a3:f6:91:
         80:21:f0:e7:21:fa:2b:81:94:1b:08:82:aa:6b:37:b6:6d:36:
         25:9d:ce:e2:2e:ac:80:a1:d9:0a:9d:d5:5f:d4:69:bc:30:5f:
         f0:23:03:dc:aa:0c:96:45:9b:fa:43:ef:49:29:c5:62:31:63:
         f4:5a:78:88:e0:24:79:46:dc:28:bb:01:71:88:9e:22:23:95:
         5a:9d:83:b5:04:ff:35:c3:aa:94:ed:f0:33:a5:7f:59:c3:60:
         6b:2d:3f:5e:26:9d:ac:8d:d4:3d:7f:59:81:6a:7d:3f:ae:4b:
         c1:e8:b6:06:f5:09:86:fb:22:f0:20:d4:20:b4:18:71:6f:5f:
         01:fe:ab:28:ba:4a:5d:1b:5a:6f:a8:94:fe:a2:98:0e:bd:9b:
         e9:8e:ce:4c:16:48:b8:ae:59:2b:a3:36:66:f4:e9:2d:5b:07:
         8f:da:b3:3a:3e:4b:0e:71:22:f8:ff:92:d0:96:84:da:ec:6f:
         02:d4:3f:cd:b4:55:ee:51:f1:88:77:0e:11:43:90:7f:2d:76:
         2c:a3:78:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----