Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/55343404-1f77-32e5-8830-e822753de654.roa
File:                     55343404-1f77-32e5-8830-e822753de654.roa (raw, json)
Hash identifier:          eyb+3ALLSV5JuWaacG6vUAdt6LwzfYhjIRNwepGRonc=
Subject key identifier:   88:23:AF:5E:EC:4E:01:19:34:C0:10:3E:F4:80:1A:23:DF:C4:7E:95
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841186E2A809F4AD218FEEB4500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/55343404-1f77-32e5-8830-e822753de654.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Thu 05 Jun 2025 04:00:00 +0000
asID:                     136557
IP address blocks:        23.27.101.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:18:6e:2a:80:9f:4a:d2:18:fe:eb:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jun  5 04:00:00 2025 GMT
        Subject: CN=915a13ef-eb01-4c7f-b605-67887fd57cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:17:8b:22:24:5b:ad:0d:2d:7f:b8:a4:0f:f0:
                    11:6e:8b:46:70:24:80:e0:df:c3:8d:e4:71:27:e0:
                    80:bf:e0:3b:25:45:61:f0:e2:1b:4a:2f:a6:82:c7:
                    28:92:18:ac:1f:72:80:af:a1:94:1a:a7:f0:c6:57:
                    2c:e0:77:31:1c:bf:24:c6:4b:43:ce:24:70:e3:9e:
                    5f:86:46:5b:86:94:61:f4:9e:29:5c:37:89:b0:65:
                    f5:a2:2d:96:65:d5:77:9c:2c:a4:8e:0d:9d:39:1c:
                    fa:2c:48:a5:7b:b3:cd:b4:8b:74:b7:20:d1:e2:f2:
                    0b:0f:ff:52:b1:b0:3a:fa:96:d2:e9:2c:10:2e:8a:
                    6f:24:a1:85:f5:51:67:67:36:8f:00:8b:8c:e7:e7:
                    ea:34:35:5e:4f:b5:e1:67:9d:ab:ca:ad:49:ca:84:
                    df:34:04:cc:bb:5e:ed:ab:bc:fe:91:27:4b:f3:cb:
                    ff:19:3b:64:22:9e:fa:c8:cd:9d:48:f3:c5:25:16:
                    1e:a1:5a:02:70:ed:19:43:a0:22:b6:11:1f:18:cb:
                    95:05:e8:cd:c2:c0:05:21:89:ad:08:54:bd:39:65:
                    51:f7:2e:82:f8:7e:97:64:12:1d:94:c7:9c:cb:3f:
                    cd:fd:61:83:14:78:e1:07:55:46:c6:6b:34:18:ae:
                    61:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:23:AF:5E:EC:4E:01:19:34:C0:10:3E:F4:80:1A:23:DF:C4:7E:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/55343404-1f77-32e5-8830-e822753de654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ad:24:36:fb:53:8b:c1:fe:62:f7:76:c8:16:d5:e1:b7:77:
         36:e0:41:dc:9c:a5:e6:f5:c4:89:5b:0c:1b:6e:9b:8d:1e:6c:
         a8:e4:7c:8c:10:75:99:a8:9c:bd:39:7b:65:a3:34:b1:fb:3d:
         8a:be:9e:bd:50:ac:22:d3:40:c9:28:7a:f6:49:73:a7:51:00:
         97:21:6a:df:d0:2f:79:21:82:96:4d:29:fd:10:5d:da:8c:51:
         8b:77:ea:89:82:90:f3:57:09:67:ed:2a:37:46:a0:6b:42:16:
         f0:97:7b:55:d2:18:97:ae:1d:b4:f7:af:06:e2:15:24:8c:6c:
         af:6b:d2:f5:c7:c2:f7:57:82:19:f4:76:98:56:10:8e:f1:19:
         a5:7d:a2:68:aa:4f:9b:3c:e0:12:47:83:c1:1b:e4:04:e6:df:
         f6:98:12:31:cb:2c:65:7d:4a:35:c7:a5:43:7c:32:73:51:69:
         7d:ee:d3:dc:9d:9e:42:91:e9:4d:b0:fa:a6:ff:94:87:f5:70:
         1f:c7:93:57:82:00:23:ae:48:42:5b:14:2a:c4:76:e7:74:e8:
         e2:63:53:59:6a:de:c0:37:74:1a:0f:c3:fb:b4:1e:0d:60:f5:
         e0:cc:43:40:08:7f:c2:6d:d8:6f:a5:ae:51:19:33:0a:95:db:
         14:07:c3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org