Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f67e3ba-1666-3ef7-94ec-92905d6de08d.roa
File:                     8f67e3ba-1666-3ef7-94ec-92905d6de08d.roa (raw, json)
Hash identifier:          9rpQy12sFbOJ7/d021FTzlQ8DbYbXl0uxb60PVlF9TQ=
Subject key identifier:   28:1F:AD:80:34:EA:FB:16:67:6B:41:FD:95:AB:CD:A4:14:A9:48:8B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583D3D08ADB59D566A105495D580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f67e3ba-1666-3ef7-94ec-92905d6de08d.roa
Signing time:             Wed 26 Aug 2020 04:00:00 +0000
ROA not before:           Wed 26 Aug 2020 04:00:00 +0000
ROA not after:            Sun 16 Jun 2024 04:00:00 +0000
asID:                     3561
IP address blocks:        50.117.48.0/24 maxlen: 24
                          50.117.64.0/24 maxlen: 24
                          136.0.85.0/24 maxlen: 24
                          136.0.106.0/24 maxlen: 24
                          142.111.181.0/24 maxlen: 24
                          142.111.224.0/24 maxlen: 24
                          142.252.31.0/24 maxlen: 24
                          142.252.55.0/24 maxlen: 24
                          172.121.6.0/24 maxlen: 24
                          172.121.131.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:3d:08:ad:b5:9d:56:6a:10:54:95:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 04:00:00 2020 GMT
            Not After : Jun 16 04:00:00 2024 GMT
        Subject: CN=20e798c4-5716-4119-8d30-d64b9366f0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:30:d4:a7:93:a6:c1:eb:b2:3d:19:8b:57:
                    c9:8e:e6:6d:28:15:1c:64:64:35:69:ee:64:ed:53:
                    cd:9a:d9:06:2c:8e:b0:67:e6:a9:d6:f6:4e:72:52:
                    0b:e2:1b:aa:0a:0e:0e:00:4e:c6:df:0d:d2:4d:aa:
                    7c:cd:87:f0:bd:ce:54:a2:21:d7:3b:56:d4:be:6c:
                    4d:9f:0f:4d:e5:b9:a3:59:6f:a8:af:ea:54:11:a7:
                    a7:ec:72:44:bb:01:92:ff:43:99:00:74:36:62:eb:
                    3d:20:df:3b:15:bc:a3:a7:24:18:5e:a7:52:91:8c:
                    f3:fc:72:a3:44:94:da:52:1c:95:e5:63:6f:d6:d2:
                    77:c2:d8:2e:a4:b3:bc:80:23:33:b0:38:e6:b7:8c:
                    57:0c:30:ac:1e:94:06:bf:9d:f1:17:b8:45:3f:e4:
                    38:d3:eb:a4:dd:4f:78:e8:c5:11:3e:e0:69:ed:0d:
                    e1:ac:c8:34:e8:6f:fd:b6:48:f3:5c:65:da:c3:a7:
                    61:6d:b5:b7:6e:59:1b:42:2e:eb:ce:eb:ef:c6:aa:
                    6c:c7:c5:8c:a9:8b:70:e2:a7:52:26:85:95:22:04:
                    5c:a2:5f:1f:e1:a0:fd:98:fc:28:bf:d9:7e:55:d0:
                    0b:f8:1f:e3:13:fd:a3:52:09:b0:89:de:09:4e:de:
                    f7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1F:AD:80:34:EA:FB:16:67:6B:41:FD:95:AB:CD:A4:14:A9:48:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f67e3ba-1666-3ef7-94ec-92905d6de08d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.117.48.0/24
                  50.117.64.0/24
                  136.0.85.0/24
                  136.0.106.0/24
                  142.111.181.0/24
                  142.111.224.0/24
                  142.252.31.0/24
                  142.252.55.0/24
                  172.121.6.0/24
                  172.121.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:23:f8:e6:68:76:82:20:f8:4b:17:96:bf:e4:18:0d:eb:26:
         bb:7e:5f:4b:a6:af:8b:ab:dd:2b:86:33:e5:72:bf:e3:e8:69:
         85:49:12:61:2b:31:3a:65:f4:77:1a:59:92:29:e7:71:b1:0a:
         81:6e:20:2c:c6:aa:4a:48:5b:ec:fb:aa:c6:2d:c6:55:51:f3:
         34:fa:64:57:48:b6:12:6e:f8:25:76:89:dc:95:80:60:d9:db:
         5a:ae:b7:76:dd:d9:61:ea:ee:ff:c9:d5:6e:23:d7:ad:96:9b:
         21:d9:00:1a:07:94:e0:ad:97:4a:14:e7:89:08:8c:1c:4d:c2:
         85:7e:76:36:f9:14:04:b1:60:41:11:e0:57:fa:2f:d2:8a:7e:
         34:fc:a1:3f:d2:c8:3a:4b:b7:48:29:a2:fb:5f:8d:a9:cc:d7:
         dc:7d:ee:ea:09:47:6f:04:bf:0a:cc:6d:50:b6:44:66:e2:6b:
         c4:d2:e7:1b:0c:7a:84:71:12:f5:06:83:dc:19:24:31:f5:fc:
         11:f4:34:82:29:89:27:25:ce:11:4c:00:80:64:0d:8b:eb:b0:
         eb:ad:31:ea:d7:5f:ef:ab:ef:b8:b7:3f:83:de:15:f1:53:dc:
         c8:3a:06:3d:74:30:b2:12:4c:0e:0a:42:6c:72:ec:8c:59:a0:
         1b:36:6f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:27 2024 by rpki-client on console-fra.rpki-client.org