Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad307299-72ba-36d1-a3e5-2ddacd8afc07.roa
File:                     ad307299-72ba-36d1-a3e5-2ddacd8afc07.roa (raw, json)
Hash identifier:          v+49u0ojwkHc4MEF7BJDeip+hXIPhXBVvzDZrulvLh4=
Subject key identifier:   30:27:3C:E6:EB:94:C9:60:5C:F8:7F:8B:F9:F1:C0:C7:C8:F5:61:90
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841CB50A511457FD9824A155100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad307299-72ba-36d1-a3e5-2ddacd8afc07.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Fri 08 Aug 2025 04:00:00 +0000
asID:                     18530
IP address blocks:        136.0.79.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:cb:50:a5:11:45:7f:d9:82:4a:15:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Aug  8 04:00:00 2025 GMT
        Subject: CN=dd9910fa-22e1-434f-8be0-0955b34d6494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e3:5c:b2:82:51:bf:3f:ac:c0:58:89:4d:c3:
                    a8:4c:28:67:80:1d:41:aa:d4:6d:e2:e3:d4:3e:df:
                    51:99:f3:13:50:4a:d0:6f:95:aa:a1:72:80:1f:9a:
                    24:46:f2:d4:55:5b:b5:4d:8c:07:4d:19:7f:46:72:
                    66:92:ac:06:9f:2c:06:94:68:8a:9d:19:5d:4a:f8:
                    3c:d5:55:32:50:63:6f:5b:81:71:eb:27:52:99:2e:
                    56:82:3e:02:38:67:f7:cb:fe:1b:2f:e3:ca:da:da:
                    84:a1:7d:0d:d6:d1:fa:e4:79:44:21:62:7d:e3:dd:
                    89:3d:66:7a:a4:10:c9:99:67:4a:43:30:3e:c7:c1:
                    b8:ee:5c:9f:53:2c:e6:dd:b9:2b:ab:ee:92:68:04:
                    f3:2a:8f:43:6e:53:60:1d:1d:55:eb:29:2d:06:bc:
                    73:1f:e8:c5:d6:27:fe:64:12:69:23:2b:b4:e8:bc:
                    bb:b3:b4:1c:26:06:67:87:bb:84:7e:37:a0:db:d5:
                    d3:85:19:50:48:74:45:a6:df:85:6a:56:e5:a8:9e:
                    ab:02:ee:d2:d3:be:32:11:88:c7:db:b4:12:eb:87:
                    9c:86:b6:07:f4:17:da:d4:72:5a:0f:cb:3c:0e:8a:
                    79:2d:3e:2e:50:bd:51:0e:47:81:3a:a2:d6:8b:91:
                    ab:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:27:3C:E6:EB:94:C9:60:5C:F8:7F:8B:F9:F1:C0:C7:C8:F5:61:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ad307299-72ba-36d1-a3e5-2ddacd8afc07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:06:6e:5e:34:08:b8:dc:3b:df:15:30:e7:67:88:b1:48:d4:
         8d:a3:e0:1c:13:ee:12:74:6f:cc:8a:52:47:7e:e9:fe:76:4e:
         34:92:a4:49:aa:34:75:41:9f:64:c7:18:87:05:f8:d0:c8:e4:
         09:06:71:3d:3d:30:37:5c:59:f2:d0:ed:a1:6e:30:7c:a9:35:
         b4:0d:6d:68:05:2e:d7:76:89:6f:18:f1:1d:cc:9b:93:6b:e9:
         b5:07:20:b0:dd:e3:97:9b:20:1c:ec:5d:5f:bd:6f:04:7e:5b:
         3c:cd:53:db:c8:21:b6:00:ca:b1:7c:07:8b:34:33:44:0b:fd:
         b1:96:6c:f6:23:eb:e8:eb:ef:17:75:d2:b7:39:4b:62:13:08:
         cf:fc:99:8a:ca:7c:e0:16:51:27:e5:00:e7:92:5f:ec:b1:82:
         33:55:43:0d:1c:4f:1d:4f:65:f8:87:be:85:80:dd:5c:cf:d9:
         b5:97:f7:26:f4:c9:6b:89:40:42:cc:3e:2e:cf:a8:18:b7:a7:
         a2:da:4a:4d:b6:00:99:a5:28:c5:a1:bf:cb:0f:96:a6:bc:a1:
         12:27:a0:f0:5c:1c:7b:8f:90:5b:8b:a7:91:35:1b:c2:80:0d:
         b3:43:27:59:cd:7c:52:73:97:5f:58:8e:7a:3f:0d:39:65:97:
         db:98:ab:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 19:21:38 2024 by rpki-client on console-fra.rpki-client.org