Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d513eba0-5dd6-36f6-99fa-e303b90c413f.roa
File:                     d513eba0-5dd6-36f6-99fa-e303b90c413f.roa (raw, json)
Hash identifier:          S7XJjZDAnvErXq3RKxQcsDkRBgY66yvH7nHQy9aM52k=
Subject key identifier:   88:E4:4C:8A:4A:7F:4D:DB:B3:1B:A3:C7:75:B0:83:3E:59:78:1F:0A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845221B938D0CBE959B36AD3340
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d513eba0-5dd6-36f6-99fa-e303b90c413f.roa
Signing time:             Thu 07 Mar 2024 22:59:07 +0000
ROA not before:           Thu 07 Mar 2024 22:59:07 +0000
ROA not after:            Wed 05 Jun 2024 21:59:07 +0000
asID:                     400402
IP address blocks:        23.27.249.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:22:1b:93:8d:0c:be:95:9b:36:ad:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  7 22:59:07 2024 GMT
            Not After : Jun  5 21:59:07 2024 GMT
        Subject: CN=9959342e-21fa-4f0a-959f-63eb68dc5e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:73:33:aa:bb:20:f1:86:d8:61:bd:a3:3d:
                    f8:93:95:0c:8e:e9:c1:6f:d7:9b:2a:40:61:42:c6:
                    b7:23:a6:61:25:50:80:a8:8b:6f:d9:2e:50:89:2c:
                    33:a5:7c:ef:68:51:94:22:6b:51:8f:ab:5d:71:39:
                    ea:4b:d6:78:bd:c1:6c:d7:d0:e5:72:82:61:d2:00:
                    ce:18:5a:ea:a2:8b:7f:2c:f1:a5:cf:08:17:07:9a:
                    fb:5e:64:31:0f:b6:23:76:8d:9a:2f:c6:28:e2:9b:
                    c9:38:cb:e3:80:68:28:0e:a2:3b:72:d6:8e:29:40:
                    5b:e6:c9:6a:15:f3:df:42:9c:17:f0:7c:48:95:dd:
                    d5:7d:bd:1c:8e:e5:66:6b:4a:35:1d:ee:1e:67:1b:
                    51:0d:0b:0d:ad:d8:ed:00:2f:22:bf:11:53:46:0f:
                    6d:39:cc:07:d9:2f:fe:a2:6d:81:46:4a:87:bd:99:
                    17:f5:4d:ba:ce:73:c7:1e:34:1e:c8:87:3c:23:0a:
                    76:aa:91:4e:da:f5:00:44:a1:a1:b1:b6:43:b3:7a:
                    56:86:85:d9:70:a6:32:a3:c8:e0:d7:44:7c:08:ba:
                    10:fb:a2:28:6b:4a:a8:5c:87:49:61:db:10:1f:f5:
                    c3:16:7e:63:40:0e:a5:d1:2f:ed:c1:5a:c3:ce:b6:
                    41:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E4:4C:8A:4A:7F:4D:DB:B3:1B:A3:C7:75:B0:83:3E:59:78:1F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d513eba0-5dd6-36f6-99fa-e303b90c413f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:c6:35:97:5f:af:06:39:8f:19:54:f9:bb:01:b6:2e:86:a1:
         59:ee:7b:6a:a4:89:ef:f2:be:1c:fd:cb:7c:44:c5:1b:1d:e1:
         de:47:6d:3e:f1:14:80:72:89:26:ed:14:42:0d:f9:9c:c3:84:
         fe:1b:70:f0:c9:ac:60:2f:c7:3a:ec:e7:92:7d:e7:b9:53:03:
         60:d3:5c:24:b7:31:94:4e:f6:46:f3:39:a5:9a:c2:7b:f6:ad:
         74:f2:a6:d2:78:32:ca:92:ff:ab:46:48:55:9e:86:a6:92:a5:
         3a:90:24:3f:ca:a8:c6:62:54:6f:26:50:de:cf:d4:01:e6:b2:
         43:8f:26:13:73:41:99:eb:68:a1:ca:a2:95:ac:ee:30:21:06:
         f3:27:a5:06:a3:b4:96:ff:bf:8f:66:37:9c:55:96:52:58:2c:
         e9:b2:f6:13:ad:cc:2c:60:fe:c6:09:3d:96:25:8f:7c:c9:18:
         30:b5:13:8c:f9:0d:c7:8b:25:ed:ba:0d:5a:ca:2f:70:ac:29:
         dd:17:77:3e:8e:4d:a7:e8:86:38:2e:4b:98:e7:fc:be:70:9e:
         e7:78:ee:ed:72:af:62:0d:99:88:03:bc:6c:42:4d:73:ba:ba:
         f7:ea:20:08:5b:b1:af:b2:b6:c8:d0:e3:17:95:00:a7:85:c6:
         77:b3:f5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----