Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f83c91c-de29-32bb-8e53-3342594a1de9.roa
File:                     2f83c91c-de29-32bb-8e53-3342594a1de9.roa (raw, json)
Hash identifier:          BhLdqiyg+Cg1k6YEiAGmyRaG56GO0oOtSHDrlXGtOFA=
Subject key identifier:   3D:E1:3F:BF:34:A8:0C:C4:A6:D7:15:CF:B0:70:C7:D4:56:62:45:EA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584060A0F71D767D02DB5A6D3E00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f83c91c-de29-32bb-8e53-3342594a1de9.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 31 Mar 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        142.111.5.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:60:a0:f7:1d:76:7d:02:db:5a:6d:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Mar 31 04:00:00 2025 GMT
        Subject: CN=b74aa2ce-bf57-42f1-87bd-31e3c3871bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:76:39:da:30:98:55:72:95:34:1d:40:39:c1:
                    0b:1c:1e:8f:68:29:2f:84:55:1b:f6:fb:dc:29:4b:
                    46:da:b5:1b:ef:f0:69:89:38:ba:7a:1c:7b:98:ab:
                    6e:cb:28:0e:ce:40:1a:2f:85:19:2b:34:24:72:67:
                    07:c9:5d:10:71:98:dc:08:20:a3:ce:4d:75:db:b8:
                    01:43:a3:34:c6:3e:99:06:28:b6:a0:cf:bb:55:c6:
                    5f:59:89:43:64:cd:5f:2d:9a:63:8a:85:e2:2c:36:
                    6f:89:3e:47:af:95:1a:31:d3:b3:b7:12:50:49:8d:
                    3f:17:4e:46:58:37:d1:8e:89:16:03:c2:f0:f0:d6:
                    3d:7f:2f:3a:cf:5a:de:0e:65:76:72:23:87:19:a5:
                    da:8a:1a:ce:7a:70:59:11:63:9a:c2:a4:c2:6c:8f:
                    ac:6d:11:fc:d2:2d:d9:f4:d1:30:76:95:b7:76:d5:
                    aa:61:4f:dc:8b:09:39:7f:c5:24:21:02:cc:92:11:
                    3e:ac:39:15:e1:7c:40:dc:d0:14:fc:1c:65:48:4f:
                    c9:4d:cc:06:be:71:dc:b9:31:4a:1e:19:3f:43:65:
                    ff:c7:7f:89:eb:6e:a3:9f:5f:ab:29:2d:41:1a:7c:
                    91:7a:41:ca:56:de:1d:55:89:c8:cd:6f:e1:2b:72:
                    08:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E1:3F:BF:34:A8:0C:C4:A6:D7:15:CF:B0:70:C7:D4:56:62:45:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2f83c91c-de29-32bb-8e53-3342594a1de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:3d:15:c2:8a:42:ad:9c:84:ca:d0:38:90:b2:18:46:6c:31:
         c1:c7:94:3a:35:05:d9:c6:71:87:11:bf:1c:29:b0:62:0a:b2:
         a5:b0:13:98:b5:51:30:ba:24:8c:0a:01:33:52:b4:ee:78:57:
         4f:75:4c:58:b8:ff:4c:f6:a9:72:8d:6e:53:53:07:4f:0c:eb:
         d5:d6:d4:f2:b2:21:f3:17:1a:24:f6:34:48:2a:32:e9:04:1c:
         62:a5:d6:28:78:fe:69:5c:7a:1a:67:64:b7:b9:42:ae:84:78:
         1d:86:b3:2f:2a:b7:19:ef:92:a5:b5:7f:6e:5f:70:47:5b:e5:
         72:cd:4a:25:5b:8d:15:86:2a:4e:f3:5e:98:92:01:02:11:46:
         4d:ee:72:66:38:b8:d7:d3:9b:d1:81:92:50:b0:28:3b:78:8c:
         c2:51:91:d1:64:5e:26:81:1a:2a:9a:f7:77:fb:41:77:6f:8b:
         83:16:c0:28:08:88:25:fb:3b:8d:b7:f1:a8:b2:77:d4:b6:18:
         36:b0:cc:36:48:e3:c1:17:9d:a5:ac:91:26:c7:f9:92:3a:32:
         d6:3e:a2:4d:f7:f4:95:1b:86:d8:4e:dd:96:56:0d:5e:0b:9e:
         f3:ba:26:25:42:ba:b1:4e:4b:2c:ad:b7:5d:50:9f:80:cb:d4:
         93:6b:96:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----