Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/600b8fa2-b1a6-37c5-981c-165a22d94433.roa
File:                     600b8fa2-b1a6-37c5-981c-165a22d94433.roa (raw, json)
Hash identifier:          Kdvte8YZO0gT20wl3goghPwhyqsCL5276ys7CxElXog=
Subject key identifier:   12:E0:4A:2E:CF:77:A8:13:E0:5F:4F:44:F8:5B:E9:FB:D2:D3:3E:95
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583FE8760CFE69985557EAD4FB80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/600b8fa2-b1a6-37c5-981c-165a22d94433.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Sun 16 Feb 2025 05:00:00 +0000
asID:                     136787
IP address blocks:        166.88.150.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e8:76:0c:fe:69:98:55:57:ea:d4:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Feb 16 05:00:00 2025 GMT
        Subject: CN=5535852d-9d15-4d63-8948-bf15fa56546f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:87:6e:41:cc:8d:8b:e4:f4:5b:71:e0:f3:4c:
                    ad:79:ac:c8:f6:31:4d:43:b0:67:cc:9e:3d:9b:e9:
                    14:47:25:5d:8c:52:a3:50:9f:8a:d7:d5:b5:72:1d:
                    05:bb:86:3a:a0:ba:f5:51:a3:76:5f:1f:55:98:0a:
                    a2:45:d5:ca:69:14:79:e9:4a:33:93:d2:ac:65:8d:
                    e0:38:c1:f3:01:d5:83:07:23:f0:c6:a3:17:3d:bf:
                    92:14:47:90:d8:f4:15:d9:c6:78:b2:b3:64:88:c9:
                    26:85:fa:88:06:ee:4b:32:60:59:41:d3:21:f5:49:
                    a5:b4:14:f4:78:92:f6:8b:ce:29:49:91:0c:12:74:
                    bb:a3:69:53:49:1d:4a:84:74:94:e4:f0:8a:c8:0a:
                    10:c8:1a:c1:39:d5:23:fe:82:94:83:84:4b:00:f1:
                    6a:03:c8:ec:cc:0e:67:89:c5:66:5e:a8:d6:d6:84:
                    df:09:ef:fa:53:e6:8d:8a:b9:d9:d1:23:92:31:4d:
                    09:f8:89:7c:e9:df:8e:31:1a:ea:f2:86:4a:b4:8c:
                    29:11:36:18:04:d0:05:1b:fb:a7:bc:f8:21:93:b0:
                    17:49:73:13:52:6d:9f:5b:3c:45:31:fc:f7:b1:5c:
                    98:f1:50:a0:23:4e:73:04:ae:23:41:6f:fc:dd:af:
                    1c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E0:4A:2E:CF:77:A8:13:E0:5F:4F:44:F8:5B:E9:FB:D2:D3:3E:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/600b8fa2-b1a6-37c5-981c-165a22d94433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:41:79:4f:be:03:c4:53:86:d3:23:61:d5:29:9f:5b:fb:1a:
         c0:a0:50:49:43:33:3c:fa:64:c3:f9:72:45:5a:07:ca:e5:85:
         30:bb:b7:10:5c:22:c5:ef:6f:53:73:07:fc:8f:e4:33:2a:8a:
         41:62:80:9a:33:53:ec:0d:60:56:62:af:e6:6d:e6:9f:71:2e:
         d9:eb:28:a0:cb:42:45:58:f9:df:90:79:78:89:ed:b9:8b:32:
         80:5f:50:9f:ff:80:50:12:96:10:2e:3e:ed:d4:86:ca:88:23:
         b5:fe:77:05:0b:8a:c3:fa:eb:d2:a6:c6:e2:b9:b0:dc:ef:8a:
         b6:50:70:98:d7:d8:09:46:c9:c6:2e:73:16:5b:3d:6d:59:c5:
         8f:9a:5a:b6:01:a0:72:70:8b:44:e4:a2:fe:11:4c:14:cf:9f:
         3f:48:fc:79:4f:c1:d8:a3:34:63:04:13:51:47:cf:b3:7d:6c:
         62:e4:83:3c:c3:c5:1c:a0:cd:05:f7:d5:12:7b:e5:e6:13:77:
         5e:cf:31:c9:1e:f0:31:a8:ba:dc:a7:56:2f:19:29:b6:17:95:
         b5:83:19:cb:c9:1b:de:7e:c5:0b:cc:48:81:be:20:b6:80:8e:
         3e:3f:3b:53:62:af:ac:52:d4:25:33:59:e0:c5:d8:19:cf:68:
         66:94:9a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----