Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f00aa7cd-26ae-3a0f-a0ee-41c547f7c5c6.roa
File:                     f00aa7cd-26ae-3a0f-a0ee-41c547f7c5c6.roa (raw, json)
Hash identifier:          yV6qbAS5G9Mhm1L4zRMC+4KK/AJS1+uMcUtp/ELLDCo=
Subject key identifier:   A1:D5:C5:28:77:BF:F3:CB:6A:45:35:EF:5D:22:DA:BA:64:3D:3C:45
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285838388FA1F7EC7D3D0DD7C7E680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f00aa7cd-26ae-3a0f-a0ee-41c547f7c5c6.roa
Signing time:             Wed 26 Aug 2020 04:00:00 +0000
ROA not before:           Wed 26 Aug 2020 04:00:00 +0000
ROA not after:            Tue 14 Mar 2023 04:00:00 +0000
asID:                     20473
IP address blocks:        23.27.1.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:38:8f:a1:f7:ec:7d:3d:0d:d7:c7:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 04:00:00 2020 GMT
            Not After : Mar 14 04:00:00 2023 GMT
        Subject: CN=dd95efad-b6e1-4ff6-86a3-7c845d6baaff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:29:33:89:1b:2d:4a:86:0b:ee:ef:98:c8:d5:
                    92:27:45:de:f1:29:9c:24:30:cc:ce:8b:cf:46:d9:
                    3f:e8:00:16:5a:ed:a1:d7:98:05:9b:f1:dc:4a:91:
                    3c:fc:78:86:89:26:a9:27:e9:cd:dd:e4:fd:c5:fb:
                    13:c4:d8:3a:8c:26:1d:04:88:21:a6:74:85:5e:6d:
                    62:72:57:c9:85:48:53:c4:f5:1e:50:48:a2:6b:16:
                    b1:97:01:c5:f7:43:26:a4:e0:9e:b9:22:fc:58:dd:
                    bf:98:24:51:45:4c:bd:2c:67:bf:d3:65:0c:45:61:
                    d9:91:40:0f:aa:ad:1f:08:3f:3d:6f:a1:fa:2b:97:
                    cf:bd:b2:4f:9c:a1:75:e4:99:ea:31:3e:e6:f0:be:
                    db:d7:35:65:f5:2a:7f:b2:98:85:42:05:53:21:77:
                    d8:32:d7:21:5a:37:3a:05:bf:fc:72:b5:2e:51:90:
                    8f:e5:1e:3e:85:04:c6:28:dd:29:05:95:d1:7d:a3:
                    39:88:eb:08:a3:7d:6e:3c:85:27:fa:79:75:20:8d:
                    f8:8e:b6:b7:f2:9d:d5:47:7b:b1:f0:63:61:54:c9:
                    ef:eb:e4:40:16:51:48:b8:01:7b:82:dc:7a:8b:64:
                    c3:c2:cb:b2:5b:3d:4c:80:78:15:23:3c:d9:82:eb:
                    1d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D5:C5:28:77:BF:F3:CB:6A:45:35:EF:5D:22:DA:BA:64:3D:3C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f00aa7cd-26ae-3a0f-a0ee-41c547f7c5c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3f:52:2a:3a:36:df:72:5f:d8:d3:03:cd:99:d9:c5:de:04:
         66:6c:dc:98:b2:21:10:c0:0f:ed:a1:68:de:97:ef:2b:ee:2f:
         7a:ec:c1:36:8c:04:c8:6c:a7:97:4e:fb:0a:a6:1e:6f:ba:ec:
         7a:09:7c:6c:1a:49:ca:c2:24:1f:13:de:5b:48:01:eb:9c:62:
         bf:57:32:b3:9b:97:ff:38:f8:5b:8e:07:8a:6d:23:86:d7:0d:
         13:bf:82:bc:4f:89:01:af:2f:a7:46:a6:ce:b7:41:e8:c5:89:
         fb:e4:91:86:39:c9:79:4d:a6:ee:c2:37:96:37:b2:03:0a:aa:
         9e:14:65:ec:80:4c:84:57:4e:3f:c3:0b:e2:c7:a8:ff:27:cd:
         3e:ae:d0:6a:88:5b:1a:91:8c:ab:cd:f1:aa:14:3a:c8:db:b2:
         cd:bb:22:45:ca:10:7f:2f:e9:9a:09:7b:73:2b:f4:14:f2:2e:
         aa:b4:b8:54:28:ee:90:73:84:83:85:ad:e9:bf:3f:d2:02:5c:
         25:87:45:b3:c5:f6:95:85:b1:f8:f6:d9:10:4f:e3:4c:f2:d9:
         dd:ef:59:d1:17:b7:93:a7:24:3f:9e:6b:21:b8:6d:44:83:31:
         4e:ac:78:78:0b:0c:13:37:fb:fc:27:f4:94:1c:b8:dc:10:41:
         b9:24:07:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----