Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4cdc9ad6-5c65-3c19-b5bd-0692dfd97edd.roa
File:                     4cdc9ad6-5c65-3c19-b5bd-0692dfd97edd.roa (raw, json)
Hash identifier:          ehrKbBOzws7TQs/cxzEJlhC5Sc//jHyXtQPyOUz8fwE=
Subject key identifier:   98:BB:13:9F:93:33:23:00:44:47:EE:AE:68:FE:E0:F2:6D:C8:C2:32
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584115E6F9F059EBF85B56032AC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4cdc9ad6-5c65-3c19-b5bd-0692dfd97edd.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 04 Jun 2025 04:00:00 +0000
asID:                     138968
IP address blocks:        136.0.121.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:15:e6:f9:f0:59:eb:f8:5b:56:03:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jun  4 04:00:00 2025 GMT
        Subject: CN=fbbebe5b-3ebe-4fa0-9505-10e099a84a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:79:08:84:38:c6:b8:f0:dd:78:dd:f2:89:ba:
                    e1:bf:2d:f2:0f:f4:0e:f2:54:20:b9:24:9e:87:3c:
                    0e:6f:5c:3d:e7:51:6e:cb:b4:af:f4:56:3c:80:53:
                    0b:9f:29:b5:a6:f2:73:fc:c4:7e:04:fd:76:77:0e:
                    c7:75:40:99:93:89:7d:83:9a:bd:54:ad:14:af:2c:
                    06:00:30:7d:fa:6b:2d:ac:13:c6:74:8b:05:1d:26:
                    cc:23:94:eb:f2:6e:1d:6d:3f:06:41:7e:80:74:e2:
                    12:5d:5b:a2:b5:dd:00:f9:0d:a9:82:45:1d:41:80:
                    70:af:1c:31:27:5c:24:48:db:04:e1:3f:40:0e:b8:
                    b0:a0:7b:b3:bc:9f:62:9f:a3:f5:c1:35:c4:56:16:
                    2b:6f:b9:4c:ef:53:73:af:8f:88:f2:2c:6b:12:18:
                    d3:ab:3f:51:58:5d:93:f4:f1:a0:a6:14:87:ef:4f:
                    81:23:a0:68:2f:80:66:e2:e9:b7:39:36:a7:0e:10:
                    cf:6a:72:14:2d:d2:21:39:d2:be:5e:51:63:9d:8b:
                    f7:5e:a1:67:27:c8:82:81:c8:a8:d4:65:27:af:27:
                    88:aa:0d:9e:0a:c2:aa:3b:f2:9a:87:d0:4e:18:36:
                    59:37:66:69:6c:f2:57:15:8e:10:6e:ed:de:20:21:
                    ab:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BB:13:9F:93:33:23:00:44:47:EE:AE:68:FE:E0:F2:6D:C8:C2:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4cdc9ad6-5c65-3c19-b5bd-0692dfd97edd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b0:d9:bb:55:33:62:bf:80:24:54:8c:d0:05:34:ab:a3:46:
         48:d0:4b:4f:de:8c:f0:62:7e:d1:3b:46:a1:c7:d5:11:55:4e:
         d5:a9:46:b4:a6:45:c2:c5:06:94:ec:c0:7a:93:a3:84:f0:f0:
         c0:4b:60:c2:79:a3:23:45:97:00:f4:ba:00:11:3b:27:83:53:
         9c:dd:af:0f:61:27:05:33:1b:2e:10:9f:03:a1:46:48:3c:b8:
         74:b3:df:9b:78:60:ac:3a:58:9f:f3:91:ba:c2:56:5b:dd:1f:
         ef:ed:85:30:f8:ef:21:81:10:e0:d9:e3:64:f8:2e:53:6d:e8:
         75:8f:0d:93:6c:06:78:2a:a0:0a:ab:b3:72:f6:d1:94:94:eb:
         99:9c:b5:42:bd:01:c3:9d:ca:63:80:ad:66:cf:a2:bb:53:44:
         fa:4d:20:93:fd:fc:ff:f5:b9:26:de:d4:1e:af:de:2f:62:95:
         c3:01:02:04:54:c5:b5:72:3e:b4:84:be:fd:2e:c1:62:5f:3d:
         82:9b:c2:3f:2d:c0:7b:61:7a:ba:07:0d:19:c2:6d:fa:d8:15:
         fc:89:5c:c5:68:30:b6:07:f2:ed:38:c9:82:07:d7:8c:74:ac:
         a2:e9:50:81:af:69:d3:a2:e3:fb:0f:9c:f0:a3:d0:95:de:5e:
         67:e1:a0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:06 2024 by rpki-client on console-ams.rpki-client.org