Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8293bee6-72a6-3f7f-8fc0-f4fee2800a08.roa
File:                     8293bee6-72a6-3f7f-8fc0-f4fee2800a08.roa (raw, json)
Hash identifier:          QLOn2DDS7xvv1vz/wmfXMF5VhJ5N80fZKGqxGvAnaMk=
Subject key identifier:   C1:E5:3B:CB:37:EE:81:90:45:9E:BF:E4:33:57:38:F4:28:21:42:7D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583CF099561AFE05C44EB5102120
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8293bee6-72a6-3f7f-8fc0-f4fee2800a08.roa
Signing time:             Wed 26 Aug 2020 04:00:00 +0000
ROA not before:           Wed 26 Aug 2020 04:00:00 +0000
ROA not after:            Mon 20 May 2024 04:00:00 +0000
asID:                     3257
IP address blocks:        23.27.236.0/22 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f0:99:56:1a:fe:05:c4:4e:b5:10:21:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 04:00:00 2020 GMT
            Not After : May 20 04:00:00 2024 GMT
        Subject: CN=b99ddb4f-75f1-4e45-8d67-489bbb64e7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:36:41:b6:0c:a6:0f:cf:1d:c3:56:f9:5b:80:
                    8c:ee:c5:94:fc:3e:86:5f:20:b7:6e:2d:4c:63:f3:
                    0e:03:0a:25:65:1e:37:57:84:14:ad:fd:58:d1:7e:
                    6d:7f:b4:a9:d6:de:56:58:0e:d7:04:5b:fa:3e:5a:
                    2b:88:ee:82:eb:bd:85:68:c2:c7:30:42:60:75:f6:
                    bc:02:cf:58:ce:4d:65:a3:3c:61:8f:f9:59:27:23:
                    8f:e0:f9:e1:d8:ba:da:17:2e:41:e7:17:57:40:5d:
                    51:41:01:e7:93:59:d1:13:21:95:c9:2a:19:bd:13:
                    47:9d:28:09:94:bc:17:ed:7c:c2:f6:d4:83:39:ee:
                    7b:f6:53:a4:34:ef:3f:b1:3f:0f:fa:61:fb:77:a7:
                    66:b9:80:e6:62:b1:52:56:d3:cb:c9:5f:b5:e3:39:
                    5a:18:b5:fe:e9:03:c2:f4:c8:c9:a2:9a:39:db:99:
                    23:ef:b5:0c:9e:cd:52:5e:e8:4a:81:be:d1:0a:45:
                    27:0f:5a:29:26:e3:54:ef:a8:42:7e:f7:9b:67:2f:
                    ce:13:ff:bd:ab:47:1b:56:12:26:ea:c8:cd:50:fa:
                    73:e0:46:66:e3:fc:29:2a:5b:78:be:38:47:8b:4c:
                    64:59:4c:3a:2b:57:46:90:87:1e:86:a5:b7:4c:46:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E5:3B:CB:37:EE:81:90:45:9E:BF:E4:33:57:38:F4:28:21:42:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8293bee6-72a6-3f7f-8fc0-f4fee2800a08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:03:4f:ba:a3:c0:49:1e:9d:43:99:27:2d:9d:3e:a9:47:6f:
         f6:da:39:5a:3b:7e:40:69:11:c2:54:d5:ea:be:1b:cc:97:56:
         7b:00:e5:f8:d2:af:73:3c:11:2f:f6:9e:55:03:79:bb:b7:56:
         2c:e4:2e:ee:7d:26:fc:c1:06:15:4d:df:8f:31:f0:f6:60:3a:
         26:db:42:2f:98:51:f3:8d:f9:95:be:dd:b9:18:e4:5d:49:af:
         95:bf:64:37:a0:5d:b7:fc:eb:13:a3:f1:50:2b:bd:b8:db:a6:
         84:80:64:be:b0:9f:49:c4:b0:dc:9b:9e:e6:c9:91:91:28:ff:
         66:be:14:dc:57:6a:b9:8a:5c:8b:8c:2e:05:5f:45:35:3f:c4:
         ed:c7:68:e2:68:91:ff:1a:b7:6c:29:9d:84:ee:14:a8:8d:7d:
         b9:64:eb:4b:dd:d8:bc:f0:83:26:db:d6:e4:2c:eb:cd:f7:f5:
         3e:25:ab:d4:54:97:f5:9c:57:73:22:a1:85:ef:46:f5:6c:b9:
         4b:ec:ca:98:14:cf:00:bb:71:5c:e6:88:ce:ff:7e:20:be:34:
         02:54:2d:64:2b:79:35:75:ad:d2:70:07:74:02:bb:bd:df:cc:
         fc:5e:e4:c3:b7:d4:ec:27:2a:67:3b:80:8d:c9:b9:e1:48:9e:
         ce:1d:18:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzwmVYa/gXETrUQISAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjA0MDAwMFoXDTI0MDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
Yjk5ZGRiNGYtNzVmMS00ZTQ1LThkNjctNDg5YmJiNjRlN2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjZBtgymD88dw1b5W4CM7sWU/D6GXyC3bi1M
Y/MOAwolZR43V4QUrf1Y0X5tf7Sp1t5WWA7XBFv6PloriO6C672FaMLHMEJgdfa8
As9Yzk1lozxhj/lZJyOP4Pnh2LraFy5B5xdXQF1RQQHnk1nREyGVySoZvRNHnSgJ
lLwX7XzC9tSDOe579lOkNO8/sT8P+mH7d6dmuYDmYrFSVtPLyV+14zlaGLX+6QPC
9MjJopo525kj77UMns1SXuhKgb7RCkUnD1opJuNU76hCfvebZy/OE/+9q0cbVhIm
6sjNUPpz4EZm4/wpKlt4vjhHi0xkWUw6K1dGkIcehqW3TEa0rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHlO8s37oGQRZ6/5DNXOPQoIUJ9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODI5M2JlZTYtNzJhNi0z
ZjdmLThmYzAtZjRmZWUyODAwYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFxvsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEDT7qjwEkenUOZJy2dPqlHb/baOVo7fkBpEcJU1eq+G8yXVnsA5fjS
r3M8ES/2nlUDebu3VizkLu59JvzBBhVN348x8PZgOibbQi+YUfON+ZW+3bkY5F1J
r5W/ZDegXbf86xOj8VArvbjbpoSAZL6wn0nEsNybnubJkZEo/2a+FNxXarmKXIuM
LgVfRTU/xO3HaOJokf8at2wpnYTuFKiNfblk60vd2Lzwgybb1uQs68339T4lq9RU
l/WcV3MioYXvRvVsuUvsypgUzwC7cVzmiM7/fiC+NAJULWQreTV1rdJwB3QCu73f
zPxe5MO31OwnKmc7gI3JueFIns4dGFU=
-----END CERTIFICATE-----