Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8633d376-566e-3eea-97a5-15baa87214b2.roa
File:                     8633d376-566e-3eea-97a5-15baa87214b2.roa (raw, json)
Hash identifier:          S2APILpWEu8sG0zXj6Cjo8ZzwZDPXyclL7shFypiJJg=
Subject key identifier:   F4:17:57:D6:27:C9:74:A8:A6:A2:96:7F:CA:5C:F0:B1:7B:17:97:07
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845148036400D1862773103DF40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8633d376-566e-3eea-97a5-15baa87214b2.roa
Signing time:             Sun 03 Mar 2024 02:00:27 +0000
ROA not before:           Sun 03 Mar 2024 02:00:27 +0000
ROA not after:            Sat 01 Jun 2024 01:00:27 +0000
asID:                     142111
IP address blocks:        136.0.92.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:14:80:36:40:0d:18:62:77:31:03:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  3 02:00:27 2024 GMT
            Not After : Jun  1 01:00:27 2024 GMT
        Subject: CN=47052d71-29c3-4500-b974-3fbde1043500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:5f:52:e8:9c:11:80:f0:96:41:08:82:42:
                    b3:ae:07:be:b5:b8:30:18:5d:90:ff:dc:17:2a:4b:
                    b1:76:5a:52:1b:55:ce:8d:1c:ec:00:4c:fd:e5:58:
                    64:19:07:6e:1c:6f:ea:ab:b3:89:f1:4c:25:13:8c:
                    d7:9e:eb:55:3d:61:bc:56:c4:70:8b:20:05:69:42:
                    e4:e1:d6:7e:1c:49:a5:0f:92:7e:7e:21:08:dd:cc:
                    cd:20:6e:40:c8:34:3c:cb:78:94:41:51:ad:d0:27:
                    92:97:68:56:ca:13:35:ca:9e:c1:a2:bf:0b:60:67:
                    e2:7f:58:92:6c:2a:c2:22:eb:36:e4:87:5f:45:19:
                    ec:99:1f:3c:6f:15:9b:f2:3c:5d:f3:63:bf:09:68:
                    52:43:be:21:f9:02:ef:84:95:26:ab:52:7b:0a:08:
                    66:8a:e4:33:2a:30:d9:b4:1d:bf:3b:34:94:bb:a9:
                    13:5e:2a:e8:90:57:3c:9d:85:e4:b2:cd:9f:96:72:
                    1b:1b:a6:0e:25:6f:0c:24:6a:99:10:f8:94:c5:51:
                    42:4c:95:d0:e6:af:39:c0:23:4c:52:c2:27:53:2e:
                    d5:1c:b1:4d:50:da:99:34:5b:12:7d:c5:95:db:21:
                    a7:a1:d7:78:9c:3f:02:41:0f:f0:ce:96:67:62:e3:
                    09:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:17:57:D6:27:C9:74:A8:A6:A2:96:7F:CA:5C:F0:B1:7B:17:97:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8633d376-566e-3eea-97a5-15baa87214b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:29:e8:e3:6c:7c:d0:54:bd:70:cb:98:df:5e:c5:1f:ca:57:
         bb:93:b4:85:c9:5c:6c:0a:08:43:78:8c:00:85:a6:de:e3:87:
         f9:60:93:cd:69:02:59:0a:a6:37:88:cf:0c:fc:5f:66:1e:25:
         19:ba:ad:c1:d0:3b:5e:89:77:d2:79:85:b8:26:75:4d:93:fe:
         9d:4a:07:71:ea:21:92:2c:42:26:77:eb:ed:49:c0:2e:b9:f6:
         b5:78:ed:10:80:f8:ee:c1:ee:31:da:13:90:48:f4:3c:1b:12:
         5e:81:7a:b3:af:fe:b5:32:aa:08:89:25:ad:d9:1b:86:5e:94:
         52:cc:96:cf:a4:2c:dd:f4:dd:ad:6d:74:b4:7a:fe:c6:9a:fa:
         3a:c7:d3:49:77:5f:bd:46:9b:cf:2f:64:47:8f:a6:8b:3c:eb:
         1d:83:69:2f:79:d7:68:3f:cd:ba:c0:73:5d:45:1a:e5:3b:f1:
         93:22:04:f4:2d:4d:d2:ab:43:39:19:82:47:67:10:c9:1e:0b:
         e7:36:f9:86:f7:ba:4b:78:4c:0e:90:56:c6:e5:4b:c8:04:ec:
         1a:6a:08:21:38:70:7f:89:48:b5:80:7f:09:7b:32:30:af:0e:
         c5:8e:ed:d3:04:6d:5c:d3:1c:71:e0:a3:8d:55:5c:2b:6b:cc:
         61:80:af:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUUgDZADRhidzED30AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI0MDMwMzAyMDAyN1oXDTI0MDYwMTAxMDAyN1owLzEtMCsGA1UEAxMk
NDcwNTJkNzEtMjljMy00NTAwLWI5NzQtM2ZiZGUxMDQzNTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD5fUuicEYDwlkEIgkKzrge+tbgwGF2Q/9wX
KkuxdlpSG1XOjRzsAEz95VhkGQduHG/qq7OJ8UwlE4zXnutVPWG8VsRwiyAFaULk
4dZ+HEmlD5J+fiEI3czNIG5AyDQ8y3iUQVGt0CeSl2hWyhM1yp7Bor8LYGfif1iS
bCrCIus25IdfRRnsmR88bxWb8jxd82O/CWhSQ74h+QLvhJUmq1J7CghmiuQzKjDZ
tB2/OzSUu6kTXirokFc8nYXkss2flnIbG6YOJW8MJGqZEPiUxVFCTJXQ5q85wCNM
UsInUy7VHLFNUNqZNFsSfcWV2yGnodd4nD8CQQ/wzpZnYuMJJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPQXV9YnyXSopqKWf8pc8LF7F5cHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvODYzM2QzNzYtNTY2ZS0z
ZWVhLTk3YTUtMTViYWE4NzIxNGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABgp6ONsfNBUvXDLmN9exR/KV7uTtIXJXGwKCEN4jACFpt7jh/lgk81p
AlkKpjeIzwz8X2YeJRm6rcHQO16Jd9J5hbgmdU2T/p1KB3HqIZIsQiZ36+1JwC65
9rV47RCA+O7B7jHaE5BI9DwbEl6BerOv/rUyqgiJJa3ZG4ZelFLMls+kLN303a1t
dLR6/saa+jrH00l3X71Gm88vZEePpos86x2DaS9512g/zbrAc11FGuU78ZMiBPQt
TdKrQzkZgkdnEMkeC+c2+Yb3ukt4TA6QVsblS8gE7BpqCCE4cH+JSLWAfwl7MjCv
DsWO7dMEbVzTHHHgo41VXCtrzGGAr9U=
-----END CERTIFICATE-----