Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fba77c52-b8bd-345f-a3b1-0ad12c25d302.roa
File:                     fba77c52-b8bd-345f-a3b1-0ad12c25d302.roa (raw, json)
Hash identifier:          JNjzlXIK5Svs8jfxueaRjxk8ma8hQD2geVesBLAykH4=
Subject key identifier:   06:4B:18:66:8C:5F:FD:2E:E2:2F:A2:5A:47:2A:28:2E:FA:66:60:D1
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583EB0606CFE1F9588263421E4C0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fba77c52-b8bd-345f-a3b1-0ad12c25d302.roa
Signing time:             Mon 25 Jul 2022 12:00:00 +0000
ROA not before:           Mon 25 Jul 2022 12:00:00 +0000
ROA not after:            Wed 26 Jul 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b0:60:6c:fe:1f:95:88:26:34:21:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jul 25 12:00:00 2022 GMT
            Not After : Jul 26 04:00:00 2023 GMT
        Subject: CN=d6d90a11-9cc7-46ad-90e9-9c11142d0489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:02:06:24:0f:40:30:22:17:52:8a:cb:61:98:
                    17:9c:dc:fe:0b:ee:60:a9:af:9d:7f:9d:ba:55:fc:
                    39:67:06:28:7b:ea:52:ae:dc:a4:40:36:10:11:2c:
                    45:14:55:a2:25:cd:68:1e:14:f4:c5:58:55:f4:de:
                    a3:0f:66:11:3e:ee:80:51:26:3a:ed:f6:1a:b7:82:
                    85:0f:57:69:06:7e:56:ce:96:51:5c:08:72:cf:d2:
                    79:c3:c7:af:c0:1d:3c:0c:1c:3e:d6:a4:af:63:59:
                    45:05:ae:3e:90:65:4b:b2:d7:08:44:5d:1a:86:7d:
                    95:49:56:21:73:0e:9f:fa:91:96:b3:a6:7d:7a:5f:
                    46:5a:b7:b4:5b:0f:83:b2:dd:ac:b4:18:ab:bd:43:
                    03:0e:3f:3c:ec:34:9e:c6:a6:af:be:d3:2d:e8:6c:
                    aa:fd:f1:08:15:0d:49:36:5b:19:52:a5:a4:f4:8f:
                    a9:ea:82:20:cf:40:33:fc:60:12:84:fc:4a:6d:f2:
                    44:50:71:08:67:33:20:1f:b7:92:a1:17:e6:a8:76:
                    0f:7f:4a:9a:fa:a4:f8:50:12:ca:13:81:c6:a6:27:
                    7b:58:2c:3b:f9:29:9a:18:76:e3:d9:ed:ba:c4:cb:
                    af:fa:2a:02:da:1e:f7:d9:8a:74:18:58:27:c9:44:
                    32:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4B:18:66:8C:5F:FD:2E:E2:2F:A2:5A:47:2A:28:2E:FA:66:60:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fba77c52-b8bd-345f-a3b1-0ad12c25d302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:dd:62:51:41:33:15:ca:d4:9b:75:e6:c3:c5:78:0b:5b:13:
         f6:3a:18:de:52:d3:2b:75:74:b0:31:56:b2:67:e0:40:51:7c:
         43:40:f0:96:b7:6a:d1:de:e8:eb:30:33:f4:36:b2:44:ad:e3:
         ef:1d:a5:84:12:bd:e0:17:71:90:0c:9a:39:c1:fc:98:0b:07:
         3b:3a:cb:3f:d3:d6:6d:e1:b9:79:b3:6b:91:e8:e7:ae:a1:bf:
         c4:d0:99:82:a1:b5:0a:b9:de:3f:95:6d:5d:d2:8e:4b:b4:53:
         3b:79:25:49:11:c1:29:e7:4f:90:11:ff:1b:e0:bb:86:4d:00:
         50:e8:5f:1a:ca:4f:23:5c:91:64:f1:bc:1c:ec:96:2b:4c:60:
         36:d2:03:f4:2e:55:de:3b:b8:eb:b6:15:62:33:0e:07:5a:df:
         6f:06:12:dd:86:93:e8:cf:b8:27:33:4a:88:95:7a:f5:e6:7f:
         8a:8c:b8:cf:6f:f8:40:53:2f:a5:ce:a1:1c:bb:69:67:d2:f7:
         ff:2d:1a:c8:bd:8f:39:4e:a9:46:69:1b:ee:6c:e2:04:6b:27:
         b7:77:95:f4:78:69:b7:bf:27:7c:3e:3a:5d:e2:40:73:1d:5e:
         1a:af:3b:f8:96:fb:3f:2a:3e:d4:70:ab:d1:24:ae:60:a9:8a:
         df:e4:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----