Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9982c863-9e40-43d6-94f3-3956b7a682bf/37cbc38b-7afe-307a-9261-34971e6b8b46.roa
File:                     37cbc38b-7afe-307a-9261-34971e6b8b46.roa (raw, json)
Hash identifier:          hT06orN1C7j4Ktc1sMKnC1BeS1gI+AvVBbOz7Znu+2w=
Subject key identifier:   FC:25:3C:0B:62:76:64:1E:3C:0E:3A:9D:4B:FC:C8:01:0C:65:60:0B
Certificate issuer:       /CN=9982c863-9e40-43d6-94f3-3956b7a682bf
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DAC5D486F
Authority key identifier: 13:EE:BF:69:85:1E:4D:90:46:7E:26:76:05:4D:60:44:80:17:D9:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9982c863-9e40-43d6-94f3-3956b7a682bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9982c863-9e40-43d6-94f3-3956b7a682bf/37cbc38b-7afe-307a-9261-34971e6b8b46.roa
Signing time:             Tue 08 Oct 2019 17:14:17 +0000
ROA not before:           Tue 08 Oct 2019 04:00:00 +0000
ROA not after:            Mon 08 Oct 2029 04:00:00 +0000
asID:                     14618
IP address blocks:        107.161.40.0/24 maxlen: 24
                          107.161.41.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:ac:5d:48:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9982c863-9e40-43d6-94f3-3956b7a682bf
        Validity
            Not Before: Oct  8 04:00:00 2019 GMT
            Not After : Oct  8 04:00:00 2029 GMT
        Subject: CN=2979b48a-51d4-47a3-90fa-7e40c06b2047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:4a:b7:ee:96:0a:63:02:7c:7a:fa:3c:f8:
                    bf:f9:cf:7a:b9:f7:10:a1:7e:b2:24:6b:aa:a1:6e:
                    2a:fa:6b:df:8c:c4:fb:fa:e5:6b:68:fc:7a:85:55:
                    2d:7e:4e:ff:58:9c:96:3d:b3:6f:48:9b:c5:5c:02:
                    d1:c6:e5:67:0c:9c:11:f2:b1:e0:a2:5e:6e:02:10:
                    f5:d8:29:f3:50:31:13:54:c5:4e:52:c3:d4:57:b6:
                    b6:4e:9c:4c:66:82:b7:82:4a:fb:73:93:ec:9d:fe:
                    1f:1a:c0:ea:b7:d3:a3:73:88:55:a5:6d:b4:35:69:
                    19:e5:94:9b:7c:4e:91:00:f4:cc:fe:78:93:3a:aa:
                    b2:d1:24:16:ca:1d:b0:ff:78:db:b0:bc:46:4b:31:
                    da:27:8c:46:a6:2b:84:69:9f:e1:05:54:64:26:c9:
                    44:ee:3b:3e:8e:0c:95:93:a0:5d:2f:b7:a0:5e:c2:
                    63:69:4a:27:26:95:16:ab:df:fc:e5:f5:0c:2a:05:
                    3a:b0:0d:11:cd:26:e1:73:17:e6:8f:ef:c3:97:19:
                    2d:a1:b1:b2:fa:e2:d6:17:e1:cf:52:ce:81:04:5b:
                    f6:c9:d7:57:fc:9d:37:79:87:fc:be:13:67:f4:13:
                    c5:a7:10:c6:e1:6f:4f:1d:d1:01:92:59:05:72:21:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:25:3C:0B:62:76:64:1E:3C:0E:3A:9D:4B:FC:C8:01:0C:65:60:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9982c863-9e40-43d6-94f3-3956b7a682bf/37cbc38b-7afe-307a-9261-34971e6b8b46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9982c863-9e40-43d6-94f3-3956b7a682bf/9982c863-9e40-43d6-94f3-3956b7a682bf.crl

            X509v3 Authority Key Identifier:
                keyid:13:EE:BF:69:85:1E:4D:90:46:7E:26:76:05:4D:60:44:80:17:D9:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9982c863-9e40-43d6-94f3-3956b7a682bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:f8:22:89:a3:df:71:7b:c6:a6:7d:b9:bd:76:00:dc:15:0a:
         2b:bf:80:a9:eb:35:15:db:e1:e0:1b:31:37:8a:21:4c:d3:8a:
         73:b6:bc:0a:d1:66:76:a2:79:0a:31:25:65:7e:20:e0:79:57:
         cb:73:89:34:5f:41:31:59:d7:57:09:39:bb:4a:6f:8e:9e:7b:
         d6:e8:31:0a:e3:58:38:cd:84:39:f4:aa:42:b3:27:50:58:39:
         31:61:74:58:c1:fb:ad:86:0a:d3:d2:77:ad:24:a6:28:44:8e:
         e5:1b:81:ee:fb:e9:31:fa:9b:f6:11:c7:1a:c5:4c:aa:94:eb:
         4c:74:f0:6e:8d:80:29:a3:78:37:e8:0c:01:5b:df:64:08:e9:
         23:fb:77:d8:49:03:1f:23:1d:d3:3f:a5:51:c6:90:b9:af:97:
         39:62:74:93:cc:fd:0d:86:dd:75:51:4b:e8:e6:e1:b4:b9:dd:
         d3:37:97:5e:0c:7f:d2:d2:a6:f1:c4:af:34:77:7b:31:8c:83:
         13:bd:c7:19:b6:2e:bb:88:24:52:60:7d:d8:53:eb:e5:43:ef:
         48:e2:d6:ec:5c:e3:12:20:dd:25:b9:7d:f2:3a:bc:f2:70:b5:
         e0:c3:2d:ef:fe:91:c5:80:72:e0:4a:1f:d6:2a:31:43:09:fc:
         47:63:21:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----