Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6a0d55db-8c7a-3a0a-a4b5-28f9a4ce3f48.roa
File:                     6a0d55db-8c7a-3a0a-a4b5-28f9a4ce3f48.roa (raw, json)
Hash identifier:          DBX09zOI9i4lDKkH+sX0Hk3lsvoJCzMy8keG9HM/IJs=
Subject key identifier:   26:E4:CD:6A:7A:FD:3D:94:ED:40:F3:C2:AA:99:B5:B1:46:A9:0E:4B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841163FA56487D57104F1C1B5C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6a0d55db-8c7a-3a0a-a4b5-28f9a4ce3f48.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 04 Jun 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        136.0.198.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:16:3f:a5:64:87:d5:71:04:f1:c1:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jun  4 04:00:00 2025 GMT
        Subject: CN=0c166b1a-86c4-484c-ba2e-dafa01d7c3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:36:ee:d3:a0:18:85:14:fa:e7:ac:42:3c:9c:
                    f9:04:6a:07:29:4a:07:83:12:07:c3:ad:f0:b4:64:
                    9e:58:3a:3c:e3:a0:ef:87:ce:b9:dd:6f:b3:f0:68:
                    1e:8e:ad:29:ed:c4:fa:a8:b8:62:6f:1c:1a:1e:2a:
                    2a:8d:49:fa:21:49:61:3e:95:d2:79:1f:7f:b7:8b:
                    9e:3f:52:aa:42:a7:98:fc:8b:69:4d:d7:b8:c5:b9:
                    7f:d4:6c:78:0e:f5:b6:ec:95:52:2f:c1:d9:f6:0c:
                    94:88:d5:35:88:4b:e7:8b:27:85:6e:01:bd:40:45:
                    60:7b:51:9b:4b:ab:be:b3:b0:0e:97:85:44:a4:53:
                    d0:15:c2:28:fb:e7:6f:0c:9a:92:42:15:e2:3f:54:
                    eb:2e:57:4d:81:54:39:9a:50:52:36:2b:e5:c7:4e:
                    0e:9a:4f:f8:de:5a:c3:b2:4b:3b:97:0f:47:d0:75:
                    5b:4b:d9:54:a2:25:a7:69:36:14:7e:90:a3:f0:be:
                    a2:31:97:88:da:02:83:66:6a:6e:f2:da:9b:07:57:
                    01:5f:1b:5d:b3:a4:40:f1:df:fc:7d:f7:da:3e:1c:
                    9e:2f:56:91:87:d5:ee:d3:68:13:d3:c2:e7:9a:b0:
                    be:f8:35:08:1b:62:85:74:2b:44:41:e9:c3:26:d5:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E4:CD:6A:7A:FD:3D:94:ED:40:F3:C2:AA:99:B5:B1:46:A9:0E:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6a0d55db-8c7a-3a0a-a4b5-28f9a4ce3f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:57:f8:88:f8:a9:9b:6e:4c:0d:13:31:8c:f4:0f:a9:20:6d:
         d1:7e:c3:4a:19:30:7c:1e:70:8e:c3:de:d0:55:23:5f:62:63:
         f3:91:68:a2:66:ee:4d:9b:c8:4d:e4:26:53:62:d0:5d:a1:5b:
         ed:a5:8f:5c:d4:ce:ac:bd:88:ab:4a:1b:8d:16:26:79:aa:90:
         b7:00:7b:25:d8:08:74:24:92:21:ab:18:73:1b:81:15:41:af:
         ab:16:66:a4:87:f8:5a:b9:fd:46:78:36:b3:c7:23:19:49:b2:
         ab:38:cb:17:64:dc:93:7b:68:6a:0b:0f:93:60:f9:2b:f0:0f:
         7a:3f:98:58:0d:e1:42:a4:99:80:1f:f0:47:0f:9c:1e:0a:7e:
         c5:a9:d2:38:71:9e:41:43:da:2b:ed:27:1a:e3:55:23:3f:ef:
         da:8f:40:ec:ca:78:4d:c9:c9:c9:f5:5d:44:df:57:dc:bf:cc:
         cc:a0:b6:fa:86:13:b6:62:ae:81:3f:43:93:fb:f9:d8:d1:1d:
         f7:56:19:0b:2c:cc:f8:c1:b7:97:02:a8:25:47:0a:36:62:58:
         9f:00:72:5b:6b:f9:5f:d4:1a:88:18:e9:ea:04:f9:9f:97:2d:
         39:a1:ca:d9:b8:e6:3d:dc:d3:33:cd:81:7e:2d:df:3e:09:49:
         f7:29:5d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----