Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39f1c126-d351-3c0b-9600-8658fea2421e.roa
File:                     39f1c126-d351-3c0b-9600-8658fea2421e.roa (raw, json)
Hash identifier:          j+wWVzFmTeFdB7Yqt7OY0ZAfWXtBcfVhylavp/F5zXM=
Subject key identifier:   5F:98:8C:07:32:A0:2C:05:51:48:D0:A0:5D:7F:08:13:D8:05:40:DC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858418AD1BB7ABB889E29ADC12A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39f1c126-d351-3c0b-9600-8658fea2421e.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 16 Jul 2025 04:00:00 +0000
asID:                     138687
IP address blocks:        136.0.251.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:8a:d1:bb:7a:bb:88:9e:29:ad:c1:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul 16 04:00:00 2025 GMT
        Subject: CN=da0975fd-1639-4e3b-a912-333efebdd938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1b:48:ba:cf:31:76:0d:72:c3:a6:80:22:47:
                    6f:f1:36:07:a2:a4:be:9f:a8:dc:48:54:fe:65:e1:
                    82:f6:1e:f9:ce:98:df:96:97:1e:0f:26:3c:a5:0b:
                    ef:1a:35:6c:e4:01:b7:b6:08:63:9b:23:c9:01:d1:
                    ed:21:44:46:01:5f:d3:f6:c6:66:f7:40:b0:c3:24:
                    90:5b:c5:c0:1e:5c:54:de:4f:a2:7a:7f:41:0f:4a:
                    1b:c0:44:c9:ab:78:68:84:76:71:8f:44:68:35:b9:
                    aa:4d:6e:5c:77:d6:5c:11:f2:da:6e:55:6d:d3:72:
                    03:be:37:0b:5b:bb:01:63:7d:02:0d:37:40:cb:5c:
                    ae:6b:47:ee:41:1b:c1:10:1e:9f:70:7c:18:4b:33:
                    8a:6b:7c:56:42:e2:7a:b3:3e:3a:ac:da:90:03:06:
                    0a:f3:1f:bf:55:ad:4f:e9:f3:78:4d:1e:a4:5a:a6:
                    e5:a1:6a:82:02:00:38:80:c7:75:86:cb:12:87:cb:
                    5d:d3:31:42:4a:1c:51:ff:51:e0:a0:bf:03:61:78:
                    fd:50:24:9a:a6:ed:1d:31:48:40:06:fc:19:af:3f:
                    ae:19:09:fa:eb:6b:c6:74:21:1a:01:fd:81:48:10:
                    46:d9:6d:03:28:d9:a9:f1:88:21:bd:b3:54:10:5f:
                    55:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:98:8C:07:32:A0:2C:05:51:48:D0:A0:5D:7F:08:13:D8:05:40:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/39f1c126-d351-3c0b-9600-8658fea2421e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a1:ac:8d:0e:6e:21:04:d8:92:36:62:59:8c:0f:01:b4:dd:
         23:b6:a0:72:5b:d5:ed:91:f3:87:66:37:72:77:8b:c1:ae:c1:
         4b:64:e3:23:ba:d5:d0:12:3f:7b:fc:7b:80:cc:83:2f:52:8c:
         e4:cb:40:c6:cc:28:cd:ab:e8:5d:30:47:e1:84:21:b5:33:5d:
         9c:ee:74:70:a9:e7:b7:d8:e3:30:d2:2b:d8:43:0a:c2:46:b2:
         fe:d3:70:ac:38:22:da:73:99:24:05:84:6b:80:67:92:3f:df:
         bc:7f:99:90:7e:99:e9:04:c4:b3:5a:76:44:a0:ba:f0:fe:31:
         7e:53:35:b5:1b:50:3b:1d:b2:20:58:18:cc:ed:7e:c5:53:ed:
         2f:aa:05:38:f3:23:d0:d8:0c:92:e6:b1:4c:ff:a4:df:5f:58:
         b2:8c:44:6e:dd:dd:44:66:7a:a3:25:08:c7:0b:63:27:83:9d:
         a6:0b:82:f3:2f:94:62:1d:41:c6:f9:7a:73:48:52:92:51:20:
         bf:a7:14:e7:14:bf:c9:77:82:03:c5:97:62:4d:45:29:5b:d9:
         7a:46:86:6b:30:7e:56:84:90:4d:71:95:fc:64:23:c3:6d:c3:
         63:30:23:66:4d:41:36:c3:a4:9b:77:6b:56:ed:4e:12:db:68:
         d4:fb:ca:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----