Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad2ed5b4-03c4-3958-9b91-ab5ce32a7485.roa
File:                     ad2ed5b4-03c4-3958-9b91-ab5ce32a7485.roa (raw, json)
Hash identifier:          dgKH36nRtuJ1HaGoJ+DmUBvProHFHhDlqdIPGwQCkYU=
Subject key identifier:   F6:B0:E2:13:72:BF:5D:3C:8D:79:19:64:2D:DB:55:90:A9:0E:EF:9E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583DF40C73FB54AD1878FF0594C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad2ed5b4-03c4-3958-9b91-ab5ce32a7485.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Wed 21 Aug 2024 04:00:00 +0000
asID:                     399114
IP address blocks:        166.88.173.0/24 maxlen: 24
                          166.88.186.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f4:0c:73:fb:54:ad:18:78:ff:05:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Aug 21 04:00:00 2024 GMT
        Subject: CN=545bcec4-939f-4432-8ecb-d083c18fde06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:56:dd:ca:de:13:61:3f:ae:9d:a6:d0:5c:c7:
                    01:f0:9f:47:5f:6a:2a:50:75:9e:a1:2a:d1:97:b2:
                    96:ca:3d:65:0a:6b:67:98:cd:cd:01:e4:45:fb:4a:
                    6d:0a:04:c9:1f:8d:46:99:60:76:24:9c:4b:a1:4c:
                    34:ff:70:26:25:02:02:1f:3f:32:4e:70:d9:09:a7:
                    72:75:3d:e0:d9:99:a9:5a:72:a9:4c:a4:a3:d3:16:
                    55:98:ae:2a:6a:be:99:f7:70:55:90:3f:f5:f9:d7:
                    a0:ce:d3:f4:1d:db:82:38:30:cf:84:a0:21:27:60:
                    33:a4:a4:ea:cc:22:d5:96:f0:22:b6:69:60:ac:49:
                    34:39:b2:f3:ab:74:8e:ed:5c:52:1f:47:db:40:d1:
                    b6:be:8c:d8:37:01:69:49:ed:20:0a:93:0a:d4:2f:
                    44:02:b8:e1:c6:17:d1:7c:ca:63:1b:90:6c:e0:79:
                    4f:60:94:66:3a:dd:81:93:68:68:aa:10:4c:28:dc:
                    b7:63:e1:4b:26:8d:75:ab:5b:9f:6f:e5:4f:e5:d6:
                    12:f0:73:64:36:7d:6a:cd:f8:ad:f8:0c:6c:90:13:
                    da:d0:a8:42:42:d7:07:b9:7d:7b:02:50:31:19:21:
                    65:c7:57:b0:99:0c:77:da:05:1a:4b:8d:75:95:56:
                    92:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B0:E2:13:72:BF:5D:3C:8D:79:19:64:2D:DB:55:90:A9:0E:EF:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad2ed5b4-03c4-3958-9b91-ab5ce32a7485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.173.0/24
                  166.88.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:30:05:63:04:9b:b5:7c:7e:74:91:06:36:7d:24:a6:47:0e:
         6d:20:9f:91:15:60:9e:f7:c0:3f:91:12:be:ed:c6:92:df:d2:
         a2:39:b8:e7:dc:9c:e1:dc:b1:2f:85:33:1f:ab:a4:5f:ce:e9:
         86:5f:96:85:dd:79:8b:51:f3:df:d5:51:92:76:36:42:4d:20:
         43:0f:80:a0:04:89:4b:1e:1b:0a:7c:b1:19:bf:2e:0f:d6:10:
         85:8b:c2:a4:25:0f:6d:c4:c8:b6:08:c1:bd:54:2d:d8:19:25:
         f7:c9:2b:30:12:cb:4a:dc:a4:f7:6c:1e:e5:d8:fa:07:4e:51:
         c6:70:3c:f6:97:e7:ec:e2:0d:36:88:78:e1:96:72:33:fd:b8:
         6e:09:84:ee:76:3d:f7:b0:96:64:51:75:ec:7c:b4:fb:8e:2c:
         b8:df:6f:7f:64:70:96:87:88:a4:da:d8:46:a8:2d:26:ff:7e:
         45:56:3c:c7:25:b8:11:68:e4:1b:93:8b:4f:c8:f9:89:94:c8:
         b0:e4:3f:d5:11:4e:17:82:2f:82:18:c9:96:c9:2e:9c:c5:50:
         5f:39:af:82:46:5e:23:61:60:6b:8c:23:5a:46:0f:ec:68:84:
         91:73:b1:6f:47:11:a4:66:f1:d2:ce:a3:6c:23:23:0f:d4:c4:
         e1:68:e0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:10 2024 by rpki-client on console-ams.rpki-client.org