Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b6912bf4-1652-3ae7-bd53-5f572bc76906.roa
File:                     b6912bf4-1652-3ae7-bd53-5f572bc76906.roa (raw, json)
Hash identifier:          C4M/2tXnVs4MM8Ytg3X/joDQsOiS3ryqL/jxRWCKt9E=
Subject key identifier:   0B:24:29:61:74:31:7C:C2:57:93:97:37:A1:75:4B:55:3D:98:FF:50
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858416D05BB0052F4DE1E2CDD1380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b6912bf4-1652-3ae7-bd53-5f572bc76906.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Sat 05 Jul 2025 04:00:00 +0000
asID:                     54252
IP address blocks:        136.0.49.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:6d:05:bb:00:52:f4:de:1e:2c:dd:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul  5 04:00:00 2025 GMT
        Subject: CN=73fd49c3-6268-4b6c-ab89-36ebd375b319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a7:e2:44:26:ba:d7:e1:c7:cb:df:b3:28:f3:
                    ac:7e:21:19:b3:30:67:7e:62:9b:b0:2f:74:56:8c:
                    5c:93:64:2f:b6:58:64:e9:80:d0:5a:bc:68:b2:50:
                    56:3a:8a:33:09:8f:1b:c4:c0:99:7e:54:2f:4e:e1:
                    5c:79:b6:ff:84:d1:c2:d1:94:c8:4e:ed:8b:ed:c0:
                    32:eb:b6:b0:17:9f:83:d3:00:3e:dd:8a:b3:11:e7:
                    d3:fd:c0:3d:bb:14:f5:88:9e:a3:f1:99:7f:c9:81:
                    5d:20:79:95:f5:a7:34:f5:34:29:07:2c:26:a9:4f:
                    91:ca:84:f3:ba:b6:4c:c1:ac:43:17:45:38:fb:42:
                    25:68:75:a7:06:12:66:2e:9d:a0:83:3a:eb:29:53:
                    2d:b2:3c:9b:af:02:25:ec:9d:1a:f6:ed:b0:77:69:
                    15:e8:d6:8e:98:86:8e:d1:5a:90:fd:7e:35:30:39:
                    b4:f2:c6:4a:73:8c:59:2d:40:fe:3b:aa:1d:5e:c9:
                    7c:29:c2:98:3a:e0:64:58:d0:43:40:71:1e:ea:a1:
                    a7:fa:50:99:e1:4e:20:64:42:ff:f5:c9:6e:6b:69:
                    91:5a:ae:60:b5:ae:14:55:78:3e:29:b0:7a:ba:86:
                    9b:26:15:c5:b5:d4:0c:e2:02:57:7e:5e:35:1e:23:
                    c5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:24:29:61:74:31:7C:C2:57:93:97:37:A1:75:4B:55:3D:98:FF:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b6912bf4-1652-3ae7-bd53-5f572bc76906.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:62:50:b3:56:68:30:30:d6:64:98:6f:5c:4e:0e:ed:0d:
         db:66:8a:38:22:b0:6f:1a:5e:9b:ed:67:f4:62:47:85:25:69:
         e3:c4:99:bf:2a:a2:83:c8:cb:f1:63:81:e5:e3:4a:6e:b3:88:
         3c:67:d7:37:9f:1b:11:44:0d:88:73:16:69:43:c6:5f:07:65:
         b7:4b:ec:48:6b:2a:89:76:a9:51:c0:0a:fb:35:72:51:dd:76:
         38:e4:65:31:88:e7:94:36:59:a7:73:d3:3a:f0:b6:34:07:45:
         21:5b:fd:e1:59:b8:16:95:2d:0e:15:44:fa:9d:31:73:b9:14:
         6e:04:4a:90:35:09:6d:24:5c:08:d3:ef:62:a3:c8:9c:51:9b:
         e6:25:72:98:43:48:47:5c:41:26:e9:44:dc:2b:97:87:00:6e:
         a5:0a:f4:6e:1b:19:da:b0:8e:65:51:cb:39:78:72:36:85:df:
         3e:64:34:e2:54:a3:d9:25:7c:72:80:f7:f6:cf:dc:fe:4f:94:
         25:76:01:01:18:bc:7b:27:d2:c7:23:5e:3f:20:cf:de:66:e7:
         47:82:6b:40:0c:10:5d:54:b0:4f:6a:50:0d:98:b4:84:c5:83:
         0b:5e:e6:ec:c1:c6:a6:2c:ff:0c:fa:ee:e9:40:31:ae:b2:c5:
         32:ae:25:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:30 2024 by rpki-client on console-fra.rpki-client.org