Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8556dcc4-24d1-3da5-9316-bde8f296f6d8.roa
File:                     8556dcc4-24d1-3da5-9316-bde8f296f6d8.roa (raw, json)
Hash identifier:          K3Nt7UNefNk3HbTMhCGdP1isYX/hxQG6SF5+9TwVygs=
Subject key identifier:   00:D3:62:64:46:83:92:13:72:50:25:51:1F:F9:F5:3B:FC:93:03:56
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845840DCFED60FFE8CA565A0080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8556dcc4-24d1-3da5-9316-bde8f296f6d8.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     9312
IP address blocks:        166.88.141.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:cf:ed:60:ff:e8:ca:56:5a:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=f71facdd-aa2d-4c12-9a98-67d72edf24eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c6:08:9a:e5:8c:53:fd:82:35:ce:49:05:a1:
                    5d:71:2c:24:9a:df:b1:c5:4f:d5:17:ac:ce:6e:91:
                    bc:9d:df:99:b6:2e:76:f1:18:9a:0a:5f:93:7e:73:
                    10:77:15:ea:5d:e6:bc:eb:c0:fc:7b:bb:76:f2:d3:
                    44:ae:5a:1d:bd:f9:36:67:55:19:dc:86:0a:80:6c:
                    53:e6:28:41:b6:5c:43:d2:4b:9e:95:3c:85:0e:73:
                    ce:6f:0e:60:a2:5b:0b:e5:42:cc:4a:06:1d:45:d6:
                    6c:51:0c:15:93:5e:5c:24:8c:56:13:29:59:dd:dc:
                    9f:00:c5:ed:ec:89:a6:16:5c:81:15:4f:3a:f9:84:
                    ac:e3:91:e0:6a:d0:bf:f3:c7:b1:53:37:56:c5:a5:
                    e6:ce:c5:62:2a:0d:c9:14:c7:a0:0a:d5:43:55:6f:
                    35:91:fd:8a:49:00:2f:3c:10:e7:8b:7d:ab:f5:19:
                    94:b0:41:b3:d8:40:f2:0a:65:78:4b:91:2c:0f:b5:
                    33:07:75:6a:96:9d:c6:b7:53:66:df:60:f5:ed:ed:
                    ad:46:f0:d3:64:d2:b9:8c:b1:f9:1f:ea:55:44:98:
                    56:be:01:1e:ee:67:e7:be:fd:c7:e3:c0:0c:ef:84:
                    9f:0d:76:ea:d3:d1:b3:50:37:f0:a6:72:8e:51:9d:
                    f2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D3:62:64:46:83:92:13:72:50:25:51:1F:F9:F5:3B:FC:93:03:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8556dcc4-24d1-3da5-9316-bde8f296f6d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b7:39:9e:84:b2:e4:d2:c8:72:27:da:6b:71:d1:73:3c:8f:
         c8:8b:23:0b:f2:ce:19:f0:14:2e:a5:d1:a7:bf:d2:47:c2:c0:
         94:84:13:fe:2e:a2:43:1b:50:1a:15:42:a1:79:c9:6f:f7:67:
         5c:46:f3:87:10:12:ef:0d:2a:b1:b6:e7:a9:07:b8:59:ae:55:
         6b:6e:f5:db:24:1e:92:f6:d6:45:f3:78:86:9a:62:f0:a1:75:
         47:08:34:07:81:c9:37:66:81:07:fb:ab:ca:b7:f5:e0:57:4c:
         c3:3d:87:cd:8b:c7:fd:28:53:f0:b0:71:fa:77:7f:ff:ab:2d:
         58:68:47:c8:c8:c9:90:03:50:05:b6:f9:35:47:d0:35:89:1a:
         13:da:8f:41:ab:54:dc:dc:12:2d:33:ec:b4:ab:49:a9:1c:a9:
         34:ce:14:d0:0e:49:6b:99:2f:12:bd:24:2e:06:50:12:49:fe:
         c4:ec:3e:91:2d:6c:26:06:a3:01:ca:98:bf:0d:47:ee:45:01:
         cd:75:7e:0d:c7:90:a2:0d:e5:e9:76:84:ea:e4:1c:4a:c0:29:
         ba:c2:53:af:d2:d4:5b:6d:fd:95:69:27:1b:b0:e0:0c:6c:95:
         a4:23:94:6b:85:78:24:55:cf:b1:07:02:0e:b7:a5:d1:85:5a:
         d9:ac:72:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWEDc/tYP/oylZaAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDQxMjAxMDAyNloXDTI0MDcxMTAxMDAyNlowLzEtMCsGA1UEAxMk
ZjcxZmFjZGQtYWEyZC00YzEyLTlhOTgtNjdkNzJlZGYyNGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycYImuWMU/2CNc5JBaFdcSwkmt+xxU/VF6zO
bpG8nd+Zti528RiaCl+TfnMQdxXqXea868D8e7t28tNErlodvfk2Z1UZ3IYKgGxT
5ihBtlxD0kuelTyFDnPObw5golsL5ULMSgYdRdZsUQwVk15cJIxWEylZ3dyfAMXt
7ImmFlyBFU86+YSs45HgatC/88exUzdWxaXmzsViKg3JFMegCtVDVW81kf2KSQAv
PBDni32r9RmUsEGz2EDyCmV4S5EsD7UzB3Vqlp3Gt1Nm32D17e2tRvDTZNK5jLH5
H+pVRJhWvgEe7mfnvv3H48AM74SfDXbq09GzUDfwpnKOUZ3y6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFADTYmRGg5ITclAlUR/59Tv8kwNWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODU1NmRjYzQtMjRkMS0z
ZGE1LTkzMTYtYmRlOGYyOTZmNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApliNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGK3OZ6EsuTSyHIn2mtx0XM8j8iLIwvyzhnwFC6l0ae/0kfCwJSEE/4u
okMbUBoVQqF5yW/3Z1xG84cQEu8NKrG256kHuFmuVWtu9dskHpL21kXzeIaaYvCh
dUcINAeByTdmgQf7q8q39eBXTMM9h82Lx/0oU/Cwcfp3f/+rLVhoR8jIyZADUAW2
+TVH0DWJGhPaj0GrVNzcEi0z7LSrSakcqTTOFNAOSWuZLxK9JC4GUBJJ/sTsPpEt
bCYGowHKmL8NR+5FAc11fg3HkKIN5el2hOrkHErAKbrCU6/S1Ftt/ZVpJxuw4Axs
laQjlGuFeCRVz7EHAg63pdGFWtmscsg=
-----END CERTIFICATE-----