Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a593c8c-880d-3088-baa3-63912431c59b.roa
File:                     8a593c8c-880d-3088-baa3-63912431c59b.roa (raw, json)
Hash identifier:          CZgOgYx7UgMC+1ElXgsNUxFgY6udGCOE2ygUGsdGFxY=
Subject key identifier:   CF:DA:94:C9:F5:E4:FC:A9:5B:51:85:40:00:05:5E:93:EB:E8:DB:FA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584060A0CD6F4E68743FA6D7FB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a593c8c-880d-3088-baa3-63912431c59b.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Mon 31 Mar 2025 04:00:00 +0000
asID:                     1239
IP address blocks:        136.0.251.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:60:a0:cd:6f:4e:68:74:3f:a6:d7:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Mar 31 04:00:00 2025 GMT
        Subject: CN=aab93ca6-41f8-4c95-ac70-0fb3e0fc4877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:ac:6a:09:22:1b:f7:48:e2:f1:02:c9:32:
                    d9:f0:80:c2:a4:4a:ee:d1:f4:46:01:f4:20:45:00:
                    19:39:4a:7e:ae:c0:4d:da:a6:ce:20:80:e1:9d:63:
                    3e:ee:a3:1f:64:d6:88:68:f3:fa:2b:8f:62:1d:98:
                    38:1a:ed:1b:1d:60:c0:d8:62:28:a0:79:ce:ca:d9:
                    c4:53:56:8d:db:c5:7a:3c:71:dd:f5:17:cf:fe:5f:
                    f3:ee:08:f0:fb:6b:dd:48:44:88:b6:f7:f3:0b:25:
                    9f:16:2c:b5:fe:d4:9b:0d:e1:e7:05:d8:31:81:62:
                    4e:75:fb:e3:b8:7f:85:5f:a0:30:45:83:b0:da:33:
                    be:63:6b:e1:a8:2f:8d:1a:a5:ef:b2:63:ae:2a:5a:
                    a6:45:59:1f:72:d5:09:a3:20:9d:f6:95:27:5c:12:
                    23:50:4d:1a:42:e3:9a:6c:5d:e6:b0:3b:18:29:10:
                    e6:25:d0:65:68:b5:0a:ac:f5:94:4c:75:d5:ae:c4:
                    2c:28:7a:e8:c1:ee:2a:19:6b:b4:6d:e7:2f:99:90:
                    b5:69:22:e6:79:00:f6:d4:80:dd:88:4f:69:fb:56:
                    7f:81:fc:5b:40:05:dc:b5:6d:a9:f8:75:95:20:dd:
                    0c:39:91:cb:07:77:6b:a3:96:be:ea:e7:08:c6:09:
                    30:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DA:94:C9:F5:E4:FC:A9:5B:51:85:40:00:05:5E:93:EB:E8:DB:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a593c8c-880d-3088-baa3-63912431c59b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c0:1a:37:c1:8b:13:c6:86:79:9e:81:09:b1:8b:f2:0d:31:
         8e:0f:e4:24:b6:2b:f4:5b:4e:1f:50:23:c6:16:69:4b:78:f3:
         90:8f:3d:b1:ad:98:ae:7f:5e:0f:57:a9:53:5a:01:c7:22:66:
         f3:80:33:95:97:81:00:5f:0f:7d:6e:14:dc:9e:64:29:bb:df:
         f6:dc:89:98:09:ca:51:03:21:ae:fb:a1:cb:bd:fe:18:9f:a0:
         ce:f0:af:cf:61:cc:55:2e:7c:29:0b:f0:b0:7e:57:2a:4d:69:
         10:cd:65:fd:a3:51:7e:47:cc:88:97:d3:16:34:81:67:34:9e:
         1a:b3:fa:c0:e3:e0:36:ec:bc:e1:09:5c:72:9b:1b:eb:46:1a:
         c4:0b:28:13:2a:95:42:48:16:9f:e0:2c:10:37:cc:e2:84:3b:
         b4:b3:38:2e:66:2a:2d:10:88:3a:41:1f:30:05:29:98:eb:72:
         80:89:67:77:cd:7d:ea:07:ec:05:7c:c6:d5:97:aa:92:93:d3:
         2f:01:74:08:6c:59:f0:86:b8:3a:47:53:08:9b:94:5c:84:39:
         c0:52:c0:c8:dc:77:81:65:e3:f2:e2:dc:ae:fe:fe:59:44:99:
         77:8b:6a:64:b5:d4:8f:6b:f7:a1:b7:9f:fd:5d:4f:9b:49:9c:
         b9:92:b9:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBgoM1vTmh0P6bX+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDMzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YWFiOTNjYTYtNDFmOC00Yzk1LWFjNzAtMGZiM2UwZmM0ODc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQWsagkiG/dI4vECyTLZ8IDCpEru0fRGAfQg
RQAZOUp+rsBN2qbOIIDhnWM+7qMfZNaIaPP6K49iHZg4Gu0bHWDA2GIooHnOytnE
U1aN28V6PHHd9RfP/l/z7gjw+2vdSESItvfzCyWfFiy1/tSbDeHnBdgxgWJOdfvj
uH+FX6AwRYOw2jO+Y2vhqC+NGqXvsmOuKlqmRVkfctUJoyCd9pUnXBIjUE0aQuOa
bF3msDsYKRDmJdBlaLUKrPWUTHXVrsQsKHrowe4qGWu0becvmZC1aSLmeQD21IDd
iE9p+1Z/gfxbQAXctW2p+HWVIN0MOZHLB3dro5a+6ucIxgkwPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM/alMn15PypW1GFQAAFXpPr6Nv6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGE1OTNjOGMtODgwZC0z
MDg4LWJhYTMtNjM5MTI0MzFjNTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAD7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnAGjfBixPGhnmegQmxi/INMY4P5CS2K/RbTh9QI8YWaUt485CPPbGt
mK5/Xg9XqVNaAcciZvOAM5WXgQBfD31uFNyeZCm73/bciZgJylEDIa77ocu9/hif
oM7wr89hzFUufCkL8LB+VypNaRDNZf2jUX5HzIiX0xY0gWc0nhqz+sDj4DbsvOEJ
XHKbG+tGGsQLKBMqlUJIFp/gLBA3zOKEO7SzOC5mKi0QiDpBHzAFKZjrcoCJZ3fN
feoH7AV8xtWXqpKT0y8BdAhsWfCGuDpHUwiblFyEOcBSwMjcd4Fl4/Li3K7+/llE
mXeLamS11I9r96G3n/1dT5tJnLmSuf0=
-----END CERTIFICATE-----