Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/105cc0f0-6957-37ee-bd00-c72844b9f3db.roa
File:                     105cc0f0-6957-37ee-bd00-c72844b9f3db.roa (raw, json)
Hash identifier:          iibBRSApHlLgzEu5AfPx7oFCYehbjXUDm2R2kQaOONQ=
Subject key identifier:   ED:A5:4C:42:10:DA:A6:25:7B:D2:10:99:A7:AC:54:B3:AB:ED:EA:65
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858424EAE19452B12957B25880380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/105cc0f0-6957-37ee-bd00-c72844b9f3db.roa
Signing time:             Thu 22 Jun 2023 19:49:06 +0000
ROA not before:           Thu 22 Jun 2023 19:49:06 +0000
ROA not after:            Wed 20 Sep 2023 19:49:06 +0000
asID:                     43260
IP address blocks:        142.111.162.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4e:ae:19:45:2b:12:95:7b:25:88:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 22 19:49:06 2023 GMT
            Not After : Sep 20 19:49:06 2023 GMT
        Subject: CN=31c400c8-62c7-49d6-ab24-3e03e75b37eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d6:2e:27:82:bf:90:b3:8c:e5:f7:13:28:c2:
                    8d:88:fa:70:2a:39:02:9a:4d:9d:68:bd:03:f1:a4:
                    9a:cd:65:e2:5c:bb:be:9a:1c:41:f8:ea:02:3b:55:
                    38:a4:41:b4:52:52:f8:8d:07:a1:10:f0:58:a1:1f:
                    c1:47:76:a0:b1:39:38:5a:07:05:10:5c:dc:36:47:
                    ea:db:89:7f:81:1f:15:60:53:7d:81:16:3d:ea:b7:
                    e2:85:55:25:0d:51:a6:8c:0c:20:b8:c2:6a:e8:79:
                    8d:4a:e3:82:e7:59:25:e3:59:30:7e:e4:44:f4:0f:
                    61:8c:13:30:52:3a:3c:7b:48:8b:db:74:18:20:74:
                    e0:ad:84:a8:4d:34:87:8f:1d:3b:d2:d1:74:24:7f:
                    61:f8:d8:96:b3:d9:a5:cd:43:fd:18:6e:80:5d:a6:
                    4c:5f:10:2f:82:83:e0:23:7c:48:f8:07:16:94:2d:
                    ea:8e:ed:87:06:58:af:51:40:4b:4c:e5:e3:a2:ce:
                    7f:90:f0:74:4c:60:98:34:d1:91:cd:29:cb:4c:1e:
                    d8:6f:6d:d1:be:bb:b6:25:c1:d9:08:88:68:1f:6b:
                    bc:6e:07:46:4f:70:8c:3b:db:64:8c:97:7b:90:11:
                    69:44:72:d3:b3:28:92:a4:96:77:e7:61:c7:8b:cd:
                    de:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A5:4C:42:10:DA:A6:25:7B:D2:10:99:A7:AC:54:B3:AB:ED:EA:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/105cc0f0-6957-37ee-bd00-c72844b9f3db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fc:97:a0:60:93:bf:cb:87:32:8f:d2:a8:d2:f4:81:ee:2d:
         6c:21:36:9a:33:23:62:4a:83:71:85:a0:ba:b6:6e:69:12:07:
         b5:20:55:16:ce:2d:a9:db:41:6b:6e:39:22:9c:55:cb:48:c1:
         ce:ed:ee:e4:34:f9:ed:73:61:8c:51:17:b8:90:f4:2b:10:61:
         42:91:47:35:da:88:ba:01:f2:ec:89:c8:4e:01:2d:46:09:a9:
         c2:14:93:b9:af:04:ea:54:88:10:9b:c9:96:0c:5e:99:a5:f1:
         ad:98:76:40:7e:35:32:e0:b1:6c:9a:ca:4e:d7:d5:2a:44:d2:
         04:19:5d:56:df:6e:83:14:14:ed:62:ff:2a:bd:e4:39:71:33:
         bb:e6:38:89:6c:6d:cb:f7:07:79:3e:4b:aa:87:ab:b2:1d:a1:
         20:b4:4f:9e:84:f2:9e:5c:89:8a:53:72:15:8d:fa:3f:2c:ca:
         b2:7a:39:bc:35:a4:e8:33:31:4f:b0:b7:99:ef:9b:cb:22:f5:
         c6:66:17:bf:47:0c:80:0c:c3:71:b4:a8:9e:1a:ca:96:75:26:
         d7:10:98:9a:30:d4:87:fe:68:5a:d0:90:e7:5e:dc:be:f2:bc:
         c7:09:d1:02:c9:5b:db:67:e0:01:ce:b5:aa:67:e1:5a:2c:e6:
         f7:13:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----