Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/666dc96b-bcef-3c59-9f01-8fe21a616620.roa
File:                     666dc96b-bcef-3c59-9f01-8fe21a616620.roa (raw, json)
Hash identifier:          WM7/+mPSsz8W/W3rsuK1L97ERCN5VszeegHflhhkUuY=
Subject key identifier:   8B:50:24:96:84:79:FA:17:5C:B5:08:AD:82:6E:1B:64:8F:6B:9F:05
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584503C00C4A0856A6A9371D7880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/666dc96b-bcef-3c59-9f01-8fe21a616620.roa
Signing time:             Mon 26 Feb 2024 02:00:26 +0000
ROA not before:           Mon 26 Feb 2024 02:00:26 +0000
ROA not after:            Sun 26 May 2024 01:00:26 +0000
asID:                     1239
IP address blocks:        50.118.238.0/24 maxlen: 24
                          104.165.101.0/24 maxlen: 24
                          45.38.44.0/24 maxlen: 24
                          45.39.78.0/24 maxlen: 24
                          104.252.134.0/24 maxlen: 24
                          45.39.57.0/24 maxlen: 24
                          23.27.184.0/24 maxlen: 24
                          45.39.116.0/24 maxlen: 24
                          45.39.184.0/24 maxlen: 24
                          23.230.11.0/24 maxlen: 24
                          107.164.77.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:03:c0:0c:4a:08:56:a6:a9:37:1d:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 26 02:00:26 2024 GMT
            Not After : May 26 01:00:26 2024 GMT
        Subject: CN=26403775-b81a-4c6b-b83e-2c790d09e464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b6:7a:9c:c1:33:2c:1e:6b:6d:a2:d7:1f:87:
                    5b:ad:40:75:8f:24:e3:e9:d9:96:c5:d6:46:97:b9:
                    63:87:b0:cb:32:a7:c7:c9:82:e1:0b:18:fb:45:d2:
                    00:65:92:39:7b:c1:2a:72:8d:fd:ce:5b:c6:f6:f6:
                    18:fd:0f:c8:5f:c7:31:45:55:ee:dc:7c:75:ef:0d:
                    45:33:98:c6:a9:b0:d8:02:26:d2:6b:f5:28:5a:9f:
                    08:86:f2:30:9a:b1:27:54:11:18:14:4c:4f:f7:1f:
                    0e:3f:9c:cc:84:85:8b:91:63:6a:ae:37:62:cf:36:
                    ef:2c:c7:18:6e:d7:a1:46:18:c9:68:46:95:fd:80:
                    6f:9a:6d:b0:d4:1d:cc:40:9c:8a:22:6a:73:d3:3d:
                    dd:f8:ee:28:ff:55:c7:8b:8c:54:2b:b5:9c:bd:cb:
                    0b:86:7f:df:81:e7:94:d8:17:9c:e5:ed:5b:7b:13:
                    6a:5f:64:c5:ee:49:a4:c0:e7:4e:ec:6b:42:99:a9:
                    e5:1c:43:98:65:fd:aa:4d:0d:1c:f2:7b:64:c7:8c:
                    c5:ea:f9:eb:f6:af:1c:c6:56:cd:21:97:61:19:ee:
                    57:e6:17:97:cf:bc:a9:69:87:db:df:dc:c4:2d:6f:
                    ea:94:cb:96:b0:84:d2:df:85:54:81:51:3c:35:de:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:50:24:96:84:79:FA:17:5C:B5:08:AD:82:6E:1B:64:8F:6B:9F:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/666dc96b-bcef-3c59-9f01-8fe21a616620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.184.0/24
                  23.230.11.0/24
                  45.38.44.0/24
                  45.39.57.0/24
                  45.39.78.0/24
                  45.39.116.0/24
                  45.39.184.0/24
                  50.118.238.0/24
                  104.165.101.0/24
                  104.252.134.0/24
                  107.164.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:2b:1f:7f:40:54:21:4d:3f:f2:c9:8a:8e:e6:d0:d0:2d:de:
         3a:08:59:04:55:38:8e:9c:d0:ba:d3:c1:9a:53:08:88:4c:0d:
         33:a2:50:1d:c0:00:9f:79:30:d5:87:b7:39:de:22:f7:f4:be:
         9e:db:b8:ea:9d:a2:1a:6f:21:cc:cc:69:0b:b9:a4:8d:ad:15:
         8f:d8:dc:ce:3f:db:9d:ac:11:05:22:46:75:43:b7:7d:25:9d:
         23:3e:a6:fd:b4:49:13:e9:fc:d8:c5:49:1c:81:28:05:fa:bd:
         b6:9a:d0:77:06:25:4d:ba:f6:a8:3e:d1:b1:f5:7f:a9:47:ab:
         8a:ba:d2:98:3b:8e:da:5a:83:e5:25:22:96:e1:4c:ba:87:da:
         57:0a:e7:ea:18:df:4b:c9:a2:12:7a:85:34:e8:a5:3a:14:bf:
         f8:20:0f:99:13:ac:b5:7f:b0:8e:0b:38:24:4d:9a:0d:1a:8a:
         d2:ab:3e:13:69:bc:95:20:65:97:43:9e:d2:3b:b7:15:7f:01:
         35:44:b8:71:94:d4:63:3c:94:aa:53:a6:1a:e2:64:53:96:3e:
         46:fc:39:c0:c9:44:9d:5e:dd:5f:d4:8b:01:78:aa:4d:ae:24:
         26:47:7d:81:06:53:45:e6:7f:1e:df:5a:d9:c2:3a:fe:58:29:
         86:bb:c0:de
-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEUDwAxKCFamqTcdeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDIyNjAyMDAyNloXDTI0MDUyNjAxMDAyNlowLzEtMCsGA1UEAxMk
MjY0MDM3NzUtYjgxYS00YzZiLWI4M2UtMmM3OTBkMDllNDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLZ6nMEzLB5rbaLXH4dbrUB1jyTj6dmWxdZG
l7ljh7DLMqfHyYLhCxj7RdIAZZI5e8Eqco39zlvG9vYY/Q/IX8cxRVXu3Hx17w1F
M5jGqbDYAibSa/UoWp8IhvIwmrEnVBEYFExP9x8OP5zMhIWLkWNqrjdizzbvLMcY
btehRhjJaEaV/YBvmm2w1B3MQJyKImpz0z3d+O4o/1XHi4xUK7WcvcsLhn/fgeeU
2Bec5e1bexNqX2TF7kmkwOdO7GtCmanlHEOYZf2qTQ0c8ntkx4zF6vnr9q8cxlbN
IZdhGe5X5heXz7ypaYfb39zELW/qlMuWsITS34VUgVE8Nd6SnwIDAQABo4IDkTCC
A40wHQYDVR0OBBYEFItQJJaEefoXXLUIrYJuG2SPa58FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjY2ZGM5NmItYmNlZi0z
YzU5LTlmMDEtOGZlMjFhNjE2NjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAFxu4AwQA
F+YLAwQALSYsAwQALSc5AwQALSdOAwQALSd0AwQALSe4AwQAMnbuAwQAaKVlAwQA
aPyGAwQAa6RNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAFQrH39AVCFNP/LJio7m0NAt3joIWQRVOI6c0LrT
wZpTCIhMDTOiUB3AAJ95MNWHtzneIvf0vp7buOqdohpvIczMaQu5pI2tFY/Y3M4/
252sEQUiRnVDt30lnSM+pv20SRPp/NjFSRyBKAX6vbaa0HcGJU269qg+0bH1f6lH
q4q60pg7jtpag+UlIpbhTLqH2lcK5+oY30vJohJ6hTTopToUv/ggD5kTrLV/sI4L
OCRNmg0aitKrPhNpvJUgZZdDntI7txV/ATVEuHGU1GM8lKpTphriZFOWPkb8OcDJ
RJ1e3V/UiwF4qk2uJCZHfYEGU0Xmfx7fWtnCOv5YKYa7wN4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:07 2024 by rpki-client on console-ams.rpki-client.org