Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/3c19bbc5-891c-3a40-bac3-c2ab34ff4bfa.roa
File:                     3c19bbc5-891c-3a40-bac3-c2ab34ff4bfa.roa (raw, json)
Hash identifier:          gUi7GBXW+8RaUSXgmYJDzB7OOGA76+nxWvXA7VfQ1zo=
Subject key identifier:   98:20:34:41:DF:32:8C:1F:1F:53:20:B3:FE:4E:3A:09:3E:FE:47:62
Certificate issuer:       /CN=9da5489c-943d-495a-995a-ee1d16049d29
Certificate serial:       010D0C9F43285837B49A97762549A8C04CBFB200
Authority key identifier: 68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/3c19bbc5-891c-3a40-bac3-c2ab34ff4bfa.roa
Signing time:             Fri 23 Oct 2020 04:00:00 +0000
ROA not before:           Fri 23 Oct 2020 04:00:00 +0000
ROA not after:            Thu 26 Jan 2023 05:00:00 +0000
asID:                     16509
IP address blocks:        204.75.186.0/24 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:b4:9a:97:76:25:49:a8:c0:4c:bf:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9da5489c-943d-495a-995a-ee1d16049d29
        Validity
            Not Before: Oct 23 04:00:00 2020 GMT
            Not After : Jan 26 05:00:00 2023 GMT
        Subject: CN=4c8f5419-d0ed-4406-8f11-c01cc01bacaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:08:de:0e:a4:73:7b:29:13:bf:44:6e:f3:4a:
                    c7:ee:47:09:e0:81:fe:5b:da:41:97:71:c8:67:14:
                    c6:5e:f8:85:e3:bf:14:da:c1:22:3b:ce:d6:17:7b:
                    63:0d:da:77:87:bd:1d:94:57:c9:64:ec:f4:ef:04:
                    1f:5f:e3:a5:bc:48:bc:e2:70:7e:65:bd:d6:db:fc:
                    88:27:a4:ec:c2:6f:2e:8e:f5:8c:2c:0d:7a:74:10:
                    82:66:63:82:e3:1a:e0:a0:1b:52:e5:37:de:40:ae:
                    1a:0e:a6:f6:dc:5f:17:75:73:fa:d6:ce:e7:4c:51:
                    20:45:7f:4f:15:85:b3:f9:b9:42:78:d7:9d:14:6c:
                    a4:c7:57:ec:8d:09:06:d5:dd:c1:7c:38:aa:7c:a1:
                    82:0a:e3:8c:08:bb:4e:db:11:8d:77:47:88:60:e7:
                    f5:ae:54:e4:9f:6f:cd:dc:74:a3:ae:c0:89:8f:0f:
                    eb:11:92:79:80:d7:5a:24:d8:19:01:8c:48:21:27:
                    31:86:5c:96:37:4f:32:0d:17:46:88:b3:22:c1:5e:
                    c6:1a:ff:bd:aa:03:a3:38:c7:09:16:0a:53:d7:44:
                    2e:05:10:b7:fa:cf:54:70:b5:2d:ce:31:86:1f:37:
                    5a:c0:5b:c9:ec:4d:33:69:80:89:dd:cc:43:13:c9:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:20:34:41:DF:32:8C:1F:1F:53:20:B3:FE:4E:3A:09:3E:FE:47:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/3c19bbc5-891c-3a40-bac3-c2ab34ff4bfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29/9da5489c-943d-495a-995a-ee1d16049d29.crl

            X509v3 Authority Key Identifier:
                keyid:68:7B:4F:F2:2B:2F:2C:0D:D0:D6:C9:89:FF:00:5C:A1:A5:50:B9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9da5489c-943d-495a-995a-ee1d16049d29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.75.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:60:5c:da:9f:c7:4e:b6:4b:8f:8f:55:f7:7b:d5:dc:55:56:
         8e:cb:0d:93:82:de:57:f4:51:b0:5e:a4:f2:0d:44:68:c0:73:
         7e:d0:00:ef:af:f0:b9:96:de:33:15:cf:f5:e2:d6:dc:3f:c8:
         d9:c8:6a:39:2e:ad:e8:df:97:19:46:1d:7d:06:89:d8:6f:d4:
         cd:6f:6d:a5:75:0b:29:28:71:2c:82:fc:1d:3e:33:20:5a:0c:
         75:d3:db:2a:03:99:86:1f:6e:c9:c0:60:54:c1:f9:10:61:ff:
         4d:bb:8d:2a:3b:76:78:73:db:b4:ac:e9:51:cd:bc:de:fa:39:
         66:d7:5f:07:52:f3:02:f6:36:92:fa:9e:35:bd:4f:0d:a0:cd:
         59:51:2e:f9:8c:a9:e3:ce:8b:2a:10:07:dd:71:8b:59:4d:bd:
         a9:94:4c:3a:a6:be:34:87:6d:0b:04:d6:30:63:0c:7e:c1:11:
         b5:91:ab:33:af:4a:c2:e4:44:6d:a7:bd:17:02:8e:3a:28:15:
         39:25:09:b5:a8:4a:bc:ab:24:57:b3:4e:11:09:80:2d:76:5c:
         d9:06:eb:e0:e9:ea:1f:bf:03:d8:1e:63:5c:43:58:b7:63:4c:
         9c:8f:e0:c2:88:13:c9:1e:c1:80:85:24:ab:0d:62:e2:a4:2c:
         05:b6:09:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----