Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1365c87c-5918-3f18-808f-08a8adb0c245.roa
File:                     1365c87c-5918-3f18-808f-08a8adb0c245.roa (raw, json)
Hash identifier:          bC7xbia2xrTgUQBpqPwh3/22Ff17/f/bpdryx/2g3hg=
Subject key identifier:   FB:85:99:A5:72:C7:E0:6D:3A:85:89:BE:77:64:9A:3F:7C:AC:2E:86
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858418568D760EE25C8B8F0ABF580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1365c87c-5918-3f18-808f-08a8adb0c245.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 14 Jul 2025 04:00:00 +0000
asID:                     38337
IP address blocks:        136.0.96.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:85:68:d7:60:ee:25:c8:b8:f0:ab:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul 14 04:00:00 2025 GMT
        Subject: CN=6cf4b755-b8b3-4b23-bcde-9d0cea514336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9a:a9:c3:df:76:6f:67:dc:98:cb:16:50:00:
                    18:54:40:bd:e1:a1:51:0a:5b:9a:7f:7b:2e:e6:1d:
                    51:65:6b:ff:8e:83:fe:fe:62:27:02:fe:5a:a9:06:
                    fd:31:f9:b5:a3:79:d8:81:d0:04:6a:76:d5:a0:c2:
                    37:a4:fe:bc:2e:0c:7a:d5:16:5a:e3:d7:ee:d9:a4:
                    44:da:88:ef:03:b8:14:86:35:07:6f:aa:2f:e3:c1:
                    0e:9d:d5:6f:cb:b5:de:d6:33:89:d4:8b:c6:4c:35:
                    be:25:03:0d:e9:ba:27:87:df:be:eb:61:78:f3:00:
                    47:d9:59:27:92:02:0f:c6:52:aa:32:63:7f:1c:fd:
                    63:8a:27:19:dc:d9:e1:37:48:e2:17:0e:a7:6c:e3:
                    a8:fd:93:c1:76:18:e7:ff:70:70:6a:03:6e:e2:a3:
                    27:fb:91:0c:46:a1:43:10:1d:52:eb:d3:24:25:66:
                    16:21:86:d7:f0:3a:62:94:95:52:e4:59:83:ac:c6:
                    33:60:46:0b:63:85:b5:db:ba:20:be:40:a7:2b:04:
                    f7:e1:de:18:61:73:61:4a:50:7b:45:47:eb:1c:a6:
                    45:bf:e8:e4:92:f6:8f:af:ec:c5:0a:1e:43:2c:b6:
                    81:54:e8:27:c0:55:b3:04:a1:3b:1b:cd:ca:80:ef:
                    0f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:85:99:A5:72:C7:E0:6D:3A:85:89:BE:77:64:9A:3F:7C:AC:2E:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1365c87c-5918-3f18-808f-08a8adb0c245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:8a:a4:6d:dd:4e:13:7f:9c:9f:34:8a:be:23:82:3e:41:0a:
         3e:ef:72:4f:6a:72:7b:97:d3:c2:72:ac:35:26:9d:c5:6b:f9:
         cc:6d:7b:79:a5:1b:d2:85:8f:1d:d7:f5:b3:16:49:66:ad:ed:
         b4:04:03:61:16:df:87:0a:c2:34:5d:b3:a1:59:8f:26:0f:35:
         14:bf:ab:ed:39:cf:fb:c9:de:80:0f:0e:8e:55:a9:b6:a5:f7:
         b4:9e:27:64:23:b9:9c:29:b5:fd:ca:99:49:f2:65:84:02:d8:
         da:1b:ab:52:f2:12:90:54:95:6d:68:e2:39:bd:33:bc:d9:7c:
         44:06:b5:92:b3:ba:95:be:87:e4:bb:01:7e:cb:a2:ae:fd:42:
         ff:c1:16:79:ac:21:c1:2c:53:b0:02:e8:a0:61:5b:b6:c9:8b:
         f0:87:36:c8:d7:67:8c:3b:03:f9:47:99:8e:84:6f:5d:ce:b7:
         42:cb:08:9f:30:84:9d:50:a5:a6:37:5f:dc:2c:cb:a9:75:5e:
         74:07:d4:34:4e:71:31:9c:db:6b:74:04:67:9a:3c:64:b2:3c:
         3c:bc:91:b8:d5:0e:bd:4c:f3:91:46:fa:89:8e:4c:88:76:ab:
         47:0f:2b:d3:7c:a6:25:5c:b6:95:4c:63:de:0d:4f:ca:f1:1d:
         af:fa:b2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----