Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34e6a0d9-c58a-38cc-b3bc-d52efe257e33.roa
File:                     34e6a0d9-c58a-38cc-b3bc-d52efe257e33.roa (raw, json)
Hash identifier:          FxHNA3sdAb0Dkq4uPOyWWsBiF6pc3M5rdwlaXgG5hLU=
Subject key identifier:   EF:8D:ED:08:7E:3B:83:89:D5:55:B6:FA:E7:99:18:0D:9E:DE:91:06
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584039994FD5E270E22FFEEEB480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34e6a0d9-c58a-38cc-b3bc-d52efe257e33.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 17 Mar 2025 04:00:00 +0000
asID:                     136787
IP address blocks:        23.27.187.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:39:99:4f:d5:e2:70:e2:2f:fe:ee:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Mar 17 04:00:00 2025 GMT
        Subject: CN=e59e5f67-97b2-4fc7-bdba-55b32235b9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:39:5b:43:99:d6:7e:51:73:50:8f:c4:c3:76:
                    5e:0d:34:ac:36:f7:0d:52:12:3f:90:0e:2b:54:e7:
                    45:a0:9b:e6:24:3a:96:f0:3e:10:1b:84:d5:b7:51:
                    40:ff:f7:2a:24:0a:39:8d:65:9f:f1:20:35:23:1d:
                    ca:19:e3:0d:e2:e6:63:b0:8d:a9:a5:a0:4e:c7:c2:
                    a8:31:8a:c2:94:e0:96:4a:b4:02:01:fb:3d:64:79:
                    03:3a:10:77:7c:01:08:4c:9f:4e:60:8d:88:dd:cd:
                    5c:c8:11:ca:4f:f5:a8:d7:3c:04:5a:02:50:76:6c:
                    1b:09:9f:5c:03:b9:90:bf:21:2e:d3:df:a1:d6:f3:
                    94:d4:c6:62:10:04:5f:b0:c7:53:29:dc:1b:e7:ec:
                    5e:fa:ce:16:c1:6b:ed:6b:e3:d9:76:40:23:ef:27:
                    0a:ab:5e:68:17:2e:1e:64:82:44:e9:46:81:d8:c9:
                    41:cb:81:81:29:66:0d:a5:45:b7:a7:11:b9:b9:e6:
                    be:6e:df:e9:51:eb:f3:73:b8:b3:65:b5:24:c8:c6:
                    6d:68:a9:b2:d6:a8:71:54:00:4e:77:eb:c4:f4:58:
                    55:e2:0a:4a:c7:ee:3c:ea:89:92:77:9e:d3:c8:aa:
                    6b:b0:e9:67:93:ad:bf:06:37:2d:5e:fc:87:c2:6c:
                    f6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8D:ED:08:7E:3B:83:89:D5:55:B6:FA:E7:99:18:0D:9E:DE:91:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34e6a0d9-c58a-38cc-b3bc-d52efe257e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d0:f6:3c:dd:c7:15:5a:0e:4d:ac:cd:a3:65:5b:77:95:a3:
         c2:38:87:a1:2d:93:09:82:f2:c5:81:5c:6d:b8:bc:a0:00:ae:
         9e:e5:2b:5b:92:fd:cb:f3:ff:d9:62:1b:cb:2b:2d:91:a4:71:
         f1:d3:72:15:fc:34:55:aa:2e:b8:95:46:83:8a:20:e4:bf:17:
         8d:7f:aa:ab:8d:b2:ad:64:03:b5:07:52:79:0d:aa:1b:ce:66:
         81:8a:34:59:75:2d:dc:80:e7:77:df:fd:f6:b6:77:f6:a0:00:
         28:4e:f6:d0:50:75:e0:5e:0f:69:28:e5:83:98:b1:08:fb:55:
         19:77:06:21:e5:a2:e1:8f:1e:ca:ca:dc:5b:dd:37:1d:11:8d:
         2e:f3:c4:90:9b:db:86:d6:43:04:c2:6c:81:12:77:ff:84:83:
         da:fc:86:c7:24:10:0f:ee:bb:ef:33:62:58:74:99:c3:d1:5c:
         56:03:8d:9c:0a:db:6b:8e:40:c2:1c:d5:ee:c2:e3:88:c5:88:
         83:0f:06:a4:68:a3:3b:4d:24:a6:29:7e:d3:10:6a:81:ac:20:
         7d:7c:09:fe:3b:15:26:1c:e6:1b:a9:82:27:0c:d5:d7:b7:2b:
         9c:07:b1:33:aa:5e:27:60:3a:db:ac:e9:4b:80:60:58:d8:dc:
         4c:fd:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----