RM3889
- break out getting of cidr to be used in multiple places
- validate that the policy cidr exists in the subnets