Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/030d46fc-715b-3595-a159-f9139f570fb9.roa
File:                     030d46fc-715b-3595-a159-f9139f570fb9.roa (raw, json)
Hash identifier:          TssTcAvSZQ+RsUDPOSFMd0tDZh601CGD9Jm6zP3XMbI=
Subject key identifier:   EF:5D:85:92:DD:C4:FA:8D:5B:6E:29:CF:81:54:86:3D:45:C3:CA:AE
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583E11BC2690BB7C05F78FE29980
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/030d46fc-715b-3595-a159-f9139f570fb9.roa
Signing time:             Sun 29 May 2022 12:00:00 +0000
ROA not before:           Sun 29 May 2022 12:00:00 +0000
ROA not after:            Tue 30 May 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:11:bc:26:90:bb:7c:05:f7:8f:e2:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: May 29 12:00:00 2022 GMT
            Not After : May 30 04:00:00 2023 GMT
        Subject: CN=2851b992-47e0-4c82-9f76-6a6c4fea9290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0d:0c:27:ab:6e:f3:80:de:3b:9e:65:72:68:
                    e1:fe:65:16:a9:61:33:76:52:a2:b2:7a:f0:ab:65:
                    e3:5d:3a:c5:90:fe:81:0e:4c:f4:08:28:ac:11:63:
                    da:2e:e4:c9:63:9a:88:40:6c:be:3f:12:0c:7d:3d:
                    91:92:44:c1:a0:b5:05:ec:a6:a9:0f:21:fb:86:f3:
                    09:d2:c2:c1:79:6a:b2:4d:92:d3:36:0a:e1:6d:66:
                    b2:ba:b6:c0:af:09:ae:92:a4:77:6c:86:04:3b:c5:
                    6d:44:35:ad:b2:16:20:fa:6f:4b:10:df:70:af:db:
                    d8:f3:d2:28:b5:b0:07:f3:99:a1:4e:21:08:63:7b:
                    bb:bb:a9:73:5e:1d:31:9a:e3:bf:e4:72:18:f8:1a:
                    69:a0:8e:5e:83:7b:83:e2:36:8e:74:59:26:31:44:
                    be:84:55:ef:24:ea:89:81:54:eb:6a:fd:df:87:34:
                    6d:d2:ab:33:a8:87:6d:56:28:ed:a1:55:2f:9f:bc:
                    05:56:54:79:c8:15:24:b9:b3:e5:80:af:8d:98:41:
                    b9:0a:8f:92:87:29:2c:3b:00:91:c5:df:d1:8f:6d:
                    55:51:29:73:e4:c8:75:0f:18:99:1c:f0:3d:95:e2:
                    5e:17:3f:5a:83:ab:29:e1:7d:ac:60:1d:67:ad:fc:
                    4f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5D:85:92:DD:C4:FA:8D:5B:6E:29:CF:81:54:86:3D:45:C3:CA:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/030d46fc-715b-3595-a159-f9139f570fb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:fb:4c:e7:54:79:c2:b9:63:ec:54:6f:16:af:82:50:b1:8c:
         da:16:45:8e:75:f8:ce:f7:4d:30:48:f0:1b:b6:c8:9f:79:f8:
         59:0a:0b:1d:7a:1d:de:c4:17:cd:3c:45:0a:d2:5a:e1:5b:2a:
         19:7a:02:80:4d:57:16:c3:46:d5:76:f9:40:c7:29:b4:7b:99:
         62:bb:0c:d0:2f:f9:28:ae:d0:c1:84:06:56:1e:7f:c2:f7:1f:
         5d:31:5b:67:fd:a3:f6:2f:67:e4:a0:65:d5:b6:3d:7e:49:cd:
         17:2e:da:a9:82:1f:f7:00:4c:99:93:f6:7f:8b:d1:af:4a:4a:
         a1:0c:ac:be:b9:e5:8e:34:dd:c4:c9:7c:c8:b5:6f:29:03:30:
         1a:fa:5e:45:74:7a:15:d1:31:91:fb:28:f7:df:96:92:4f:40:
         75:c0:c8:35:8a:28:49:dd:c4:1b:9c:74:43:f6:3b:ec:e0:1b:
         24:3c:53:5b:84:ae:71:64:eb:1a:64:68:7a:c3:65:f0:4d:62:
         8d:a9:33:12:13:12:fd:e7:a5:a1:b9:39:5c:bd:c0:f9:98:ec:
         d8:a0:e8:40:0d:ba:b4:33:f9:0d:89:32:f1:da:df:1e:f3:6d:
         01:f4:b4:aa:05:e0:35:68:a4:1d:38:52:96:51:4f:43:37:7f:
         80:d3:32:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----