Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db69077b-2c21-30c7-a21d-a12ce5e9a116.roa
File:                     db69077b-2c21-30c7-a21d-a12ce5e9a116.roa (raw, json)
Hash identifier:          JxJX1H1aNGX+i/NjEbdOmG2B+qvg3WpF6WpTgVdypp4=
Subject key identifier:   D1:69:AC:D4:D1:6B:CB:E7:8F:03:9E:36:A4:77:D1:1D:36:FA:26:F6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858416D06B61AA81F05D7131EDAC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db69077b-2c21-30c7-a21d-a12ce5e9a116.roa
Signing time:             Wed 26 Aug 2020 17:55:28 +0000
ROA not before:           Wed 26 Aug 2020 17:55:28 +0000
ROA not after:            Sat 05 Jul 2025 04:00:00 +0000
asID:                     54252
IP address blocks:        142.111.244.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:6d:06:b6:1a:a8:1f:05:d7:13:1e:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 17:55:28 2020 GMT
            Not After : Jul  5 04:00:00 2025 GMT
        Subject: CN=fe9c40fd-a76d-41c8-a042-dfd0d84fba86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:98:45:97:15:e1:67:5a:8b:35:4c:b8:a0:de:
                    d8:ba:82:4d:d2:d1:e7:2b:79:06:c9:3a:6a:75:3e:
                    92:65:57:22:3a:8f:8e:1f:df:d5:69:dc:56:e4:73:
                    77:31:9f:a7:a4:29:20:df:5a:7b:ed:fa:69:2e:3c:
                    1e:e2:3e:14:d6:9f:20:b2:79:b2:8c:88:50:97:0b:
                    b4:e7:65:33:8b:c7:70:55:51:1f:16:4d:50:bf:43:
                    60:7e:3b:9d:bf:e4:78:f8:11:e5:46:39:a4:37:06:
                    65:ae:51:02:2e:b6:a5:71:7e:de:6e:f2:08:1d:b2:
                    c9:fc:9a:3e:26:c0:ed:29:9c:7f:7f:e4:0a:e4:4a:
                    6f:4d:53:79:b8:38:50:fd:ad:fb:e2:76:ce:95:af:
                    d7:2e:00:c9:25:1a:72:39:9b:ce:db:b1:63:25:9b:
                    15:47:47:9f:0c:ed:28:d2:35:8f:68:64:d0:fb:3d:
                    41:7b:50:8a:df:3e:db:64:a3:14:77:9e:1b:e4:cb:
                    dd:90:ca:d4:86:ef:2e:01:f7:ea:d6:d5:65:b7:3c:
                    c4:53:21:c1:97:93:86:4b:a8:28:bf:6a:e8:2b:41:
                    30:eb:b2:aa:38:1e:16:c6:23:b4:9b:eb:09:64:ed:
                    04:cc:6b:4d:9a:88:3a:05:9e:dd:5b:16:42:e0:3f:
                    25:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:69:AC:D4:D1:6B:CB:E7:8F:03:9E:36:A4:77:D1:1D:36:FA:26:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/db69077b-2c21-30c7-a21d-a12ce5e9a116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:df:9a:5b:7c:a5:9d:94:32:32:3a:12:b5:44:4e:08:49:27:
         f9:51:f8:2f:22:0d:dd:56:18:ef:3e:fc:9e:15:2a:a1:5e:f2:
         b4:60:2f:23:62:39:fb:1e:41:92:9b:5c:97:fb:05:67:7f:c3:
         0c:2a:50:45:d1:6d:1f:e2:2e:02:4f:9f:9f:6e:2f:fd:e5:a3:
         c8:37:e8:3e:b1:8d:0f:f0:97:72:5f:a7:4b:4e:13:39:ab:18:
         8e:fa:42:16:11:fc:aa:67:97:1a:18:f5:41:b8:44:73:32:3f:
         ef:0f:5a:28:8e:86:eb:67:1d:79:71:88:30:60:95:c9:75:c8:
         9d:79:f7:c0:80:17:43:e7:1b:81:ee:89:86:cb:57:d3:6f:57:
         45:aa:79:a2:77:e6:51:3c:31:e8:d8:07:37:8b:1e:8b:66:5f:
         6c:21:29:5a:3f:3e:24:d2:21:21:f5:00:c3:d4:2d:f0:6e:5f:
         ef:52:c3:04:f6:44:99:10:fe:ae:5f:41:a2:01:33:04:8d:2c:
         fd:d0:34:92:76:ac:e5:b4:ac:c8:33:25:0d:5f:7d:c2:0e:78:
         6b:d3:59:64:de:6b:08:01:91:1d:76:43:2b:a3:f0:f6:a2:04:
         4c:d2:86:22:10:9a:1b:58:d1:e3:2b:fb:00:74:1f:54:39:dd:
         4e:1c:16:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFtBrYaqB8F1xMe2sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjE3NTUyOFoXDTI1MDcwNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmU5YzQwZmQtYTc2ZC00MWM4LWEwNDItZGZkMGQ4NGZiYTg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJhFlxXhZ1qLNUy4oN7YuoJN0tHnK3kGyTpq
dT6SZVciOo+OH9/VadxW5HN3MZ+npCkg31p77fppLjwe4j4U1p8gsnmyjIhQlwu0
52Uzi8dwVVEfFk1Qv0Ngfjudv+R4+BHlRjmkNwZlrlECLralcX7ebvIIHbLJ/Jo+
JsDtKZx/f+QK5EpvTVN5uDhQ/a374nbOla/XLgDJJRpyOZvO27FjJZsVR0efDO0o
0jWPaGTQ+z1Be1CK3z7bZKMUd54b5MvdkMrUhu8uAffq1tVltzzEUyHBl5OGS6go
v2roK0Ew67KqOB4WxiO0m+sJZO0EzGtNmog6BZ7dWxZC4D8lJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNFprNTRa8vnjwOeNqR30R02+ib2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGI2OTA3N2ItMmMyMS0z
MGM3LWEyMWQtYTEyY2U1ZTlhMTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDfmlt8pZ2UMjI6ErVETghJJ/lR+C8iDd1WGO8+/J4VKqFe8rRgLyNi
OfseQZKbXJf7BWd/wwwqUEXRbR/iLgJPn59uL/3lo8g36D6xjQ/wl3Jfp0tOEzmr
GI76QhYR/KpnlxoY9UG4RHMyP+8PWiiOhutnHXlxiDBglcl1yJ1598CAF0PnG4Hu
iYbLV9NvV0WqeaJ35lE8MejYBzeLHotmX2whKVo/PiTSISH1AMPULfBuX+9SwwT2
RJkQ/q5fQaIBMwSNLP3QNJJ2rOW0rMgzJQ1ffcIOeGvTWWTeawgBkR12Qyuj8Pai
BEzShiIQmhtY0eMr+wB0H1Q53U4cFjk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:12 2024 by rpki-client on console-ams.rpki-client.org