Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/16a014f0-6820-3f8a-968f-431c70a5c452.roa
File:                     16a014f0-6820-3f8a-968f-431c70a5c452.roa (raw, json)
Hash identifier:          GG5aqa8DqTuKibRIKxvdZmuk9J2ca8bsl2nW/lOuSWE=
Subject key identifier:   C0:CE:9D:67:04:B6:F0:D4:97:B3:F1:DE:4C:38:82:46:AD:E2:96:66
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583E6145FAC84AC300917D16E9C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/16a014f0-6820-3f8a-968f-431c70a5c452.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Sun 29 Sep 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        107.186.1.0/24 maxlen: 24
                          107.186.5.0/24 maxlen: 24
                          107.186.10.0/24 maxlen: 24
                          107.186.31.0/24 maxlen: 24
                          136.0.246.0/24 maxlen: 24
                          136.0.252.0/24 maxlen: 24
                          142.111.137.0/24 maxlen: 24
                          142.111.144.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:61:45:fa:c8:4a:c3:00:91:7d:16:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Sep 29 04:00:00 2024 GMT
        Subject: CN=3c49405f-a805-4c60-8bf3-a6539cb082f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:8d:cc:35:14:3c:b5:6b:b1:97:d0:d8:70:
                    35:52:7b:f6:e3:5d:b0:d8:bc:9b:06:12:f2:d0:cd:
                    3f:b4:0e:39:9d:38:6b:0b:57:8a:be:e2:88:bf:a6:
                    c9:a5:82:b4:d4:09:3b:df:84:27:ec:0f:cc:ae:dd:
                    28:2e:31:01:33:4d:67:c3:d0:06:66:de:30:7d:12:
                    13:15:f3:71:c3:50:fd:c8:43:83:8c:df:f7:91:30:
                    31:b4:ac:36:1c:8e:dd:ff:4c:5a:81:14:23:18:df:
                    de:4d:0c:0d:16:51:6a:f2:3f:48:74:a9:82:31:99:
                    38:07:a7:57:f6:d5:e1:1e:d2:52:6d:a5:c9:ca:d2:
                    d6:05:d9:01:0d:45:c8:bd:16:c7:ed:78:04:12:05:
                    c7:55:e8:af:d8:00:03:53:a8:30:42:d1:5d:39:b6:
                    14:de:f5:a6:f4:d2:b5:22:fd:47:c6:5d:30:cd:30:
                    d0:f1:3f:f9:ee:6a:91:b3:3a:60:1d:83:fc:f4:f0:
                    39:79:ee:2c:17:c4:b3:6b:0a:4a:a3:34:17:b7:95:
                    33:aa:50:fb:a3:eb:db:e4:c7:d6:f4:11:22:50:95:
                    b3:73:34:55:02:18:6f:8f:2c:09:4f:7a:d3:57:44:
                    16:6a:b4:f0:80:43:48:57:94:ab:10:7f:66:99:ed:
                    e8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CE:9D:67:04:B6:F0:D4:97:B3:F1:DE:4C:38:82:46:AD:E2:96:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/16a014f0-6820-3f8a-968f-431c70a5c452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.186.1.0/24
                  107.186.5.0/24
                  107.186.10.0/24
                  107.186.31.0/24
                  136.0.246.0/24
                  136.0.252.0/24
                  142.111.137.0/24
                  142.111.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ce:33:3b:22:b8:ca:9d:b8:61:05:c2:05:0b:85:90:62:96:
         f8:3c:40:01:6c:70:2d:c6:bb:e2:84:27:b4:cd:e3:2a:39:ca:
         5e:b5:34:15:d1:34:99:9d:f9:da:94:89:2f:40:e8:e8:3d:e1:
         ef:0b:bc:6d:20:01:3f:5d:2b:6f:5d:94:ec:dc:c6:1d:e7:74:
         bb:f9:60:cb:c9:ae:8f:c8:c0:df:b9:e7:58:5a:37:34:b1:f3:
         4c:15:a9:7a:a4:e8:29:92:5c:e9:08:d1:4f:05:7b:63:3e:aa:
         09:85:78:2b:ea:9d:15:9b:02:5b:72:f7:c9:9c:e7:71:75:32:
         2d:82:7c:6b:bb:3f:64:f5:8c:b8:77:7f:e0:c7:8b:ca:02:6f:
         2c:50:e5:2b:8b:67:a8:9a:4d:3f:9a:68:ec:85:18:e0:72:44:
         77:b2:c7:1b:13:37:57:0c:7c:57:71:17:83:a2:50:f1:56:38:
         fe:48:b0:4f:0c:d2:18:90:b0:88:e8:27:3c:93:6a:08:c1:84:
         0f:97:48:76:79:d0:d3:34:04:40:24:ad:ac:1e:94:c9:35:56:
         23:3c:79:92:f6:4c:3e:68:ed:c2:cf:78:89:c9:cc:da:10:4a:
         69:51:84:06:78:c3:01:6c:ed:0f:80:40:de:aa:0a:ca:6f:ff:
         22:9e:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:03 2024 by rpki-client on console-ams.rpki-client.org