Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/3adcc69e-b159-3375-8763-1758948a1b3b.roa
File:                     3adcc69e-b159-3375-8763-1758948a1b3b.roa (raw, json)
Hash identifier:          tophgHKby8yaWfQZjJG5/3XC1r4OCTj4yy0ptgbVppE=
Subject key identifier:   BB:9E:20:02:8E:8F:45:B6:4E:23:A8:54:1F:25:FE:7B:4F:C1:B7:09
Certificate issuer:       /CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
Certificate serial:       010D0C9F43285843359A0865980E5B5E0BEABB80
Authority key identifier: C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/3adcc69e-b159-3375-8763-1758948a1b3b.roa
Signing time:             Wed 13 Sep 2023 13:00:23 +0000
ROA not before:           Wed 13 Sep 2023 13:00:23 +0000
ROA not after:            Tue 12 Dec 2023 14:00:23 +0000
asID:                     14618
IP address blocks:        170.89.64.0/18 maxlen: 24

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:35:9a:08:65:98:0e:5b:5e:0b:ea:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3ff10d-9ac5-46a9-8eb4-823027607ca1
        Validity
            Not Before: Sep 13 13:00:23 2023 GMT
            Not After : Dec 12 14:00:23 2023 GMT
        Subject: CN=ca70b6d5-c1ca-405d-90d7-6a0feefbd7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d2:48:74:c1:d9:c4:69:d9:af:d0:52:6a:cb:
                    86:33:d5:b0:7a:a8:9c:89:41:1f:d6:30:80:a7:00:
                    a3:79:10:12:3e:9e:c9:e9:5d:9e:9b:67:46:18:b0:
                    78:2f:d0:d5:00:a6:cf:b7:34:62:dc:c2:50:51:9d:
                    d7:75:25:53:77:de:30:c3:ac:05:87:3e:43:f0:de:
                    61:43:1a:2d:13:38:9a:f6:0b:74:df:33:94:bf:d9:
                    be:f5:5b:cd:19:16:8d:6e:19:53:88:5c:77:9e:18:
                    98:f0:01:82:c7:74:ae:37:d9:6f:51:ed:91:43:61:
                    93:a4:34:d0:35:e4:80:3d:8e:1f:bf:58:85:37:7d:
                    83:bc:27:f6:d8:12:67:4d:c4:9d:17:cd:6a:51:ce:
                    24:5a:74:33:39:49:f5:b4:5d:3f:9a:eb:14:2d:11:
                    04:71:00:c3:26:d9:5e:32:3f:8b:f1:bb:7c:ba:f3:
                    74:d9:7b:1a:e3:fe:4c:87:74:a6:5c:39:8f:20:38:
                    14:41:f3:16:71:ee:8b:de:e6:71:fd:b6:b3:9d:3f:
                    3f:01:ca:c9:e8:b7:2f:a3:13:3f:58:1b:e1:59:8a:
                    7d:94:b6:af:b3:73:91:65:21:e5:a9:99:63:3a:d4:
                    94:61:aa:c5:a1:7e:6b:26:1e:b6:81:9a:a7:52:f1:
                    23:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9E:20:02:8E:8F:45:B6:4E:23:A8:54:1F:25:FE:7B:4F:C1:B7:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/3adcc69e-b159-3375-8763-1758948a1b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1/be3ff10d-9ac5-46a9-8eb4-823027607ca1.crl

            X509v3 Authority Key Identifier:
                keyid:C5:FD:6F:CD:D2:74:9A:00:05:9F:45:D5:49:E1:47:AE:5D:95:65:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be3ff10d-9ac5-46a9-8eb4-823027607ca1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.89.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:39:ef:30:fe:d7:8e:1f:74:f7:ee:e1:88:dd:ae:96:6b:70:
         60:d3:29:3b:10:e6:f5:1b:d6:b3:18:f2:76:8f:aa:a0:78:55:
         dd:2b:80:3f:93:fd:e2:6d:c7:24:aa:ce:00:9f:47:71:d6:39:
         0b:3f:9f:98:e3:ce:0a:bc:47:2c:c1:ea:17:17:98:2e:4b:60:
         c3:06:7e:62:0b:99:d9:ec:f4:26:42:65:f3:8a:7e:52:5a:10:
         7b:1c:9b:12:99:0c:f9:a7:66:bb:a7:c7:9b:5a:73:19:3e:58:
         7f:c7:ae:08:2c:31:79:bf:58:2a:f2:84:7c:7d:26:a5:80:58:
         95:3e:e8:77:48:36:58:cb:56:7b:55:8a:a3:1b:1d:99:83:38:
         39:1e:67:7a:51:35:8d:2d:1e:ef:a3:1f:d9:f8:32:04:43:13:
         e4:34:af:a5:94:81:ed:4f:86:51:c9:e3:34:b6:41:56:f5:9b:
         04:4e:a1:c8:fb:cc:0c:73:06:70:08:62:55:f9:31:0d:e2:b8:
         50:88:da:0c:6b:94:5b:88:7c:fc:7d:6e:fc:b3:f1:f1:a6:28:
         50:23:17:ea:e4:90:13:1c:8e:9d:82:3d:01:ee:90:d0:20:e3:
         59:e4:79:bc:b7:e4:6c:d4:92:b3:ed:bb:68:9d:cd:28:c8:79:
         bb:80:59:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----