Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0b58cd3f-c9bb-3905-9825-9e294cd56b55.roa
File:                     0b58cd3f-c9bb-3905-9825-9e294cd56b55.roa (raw, json)
Hash identifier:          LcaaGly17OLdeBRQ2pCWIW9VAodepO000xZDjUMlhBo=
Subject key identifier:   1C:15:BF:63:E2:7C:BC:9F:A2:13:F3:79:EF:12:3A:17:E8:90:C4:E4
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583D4B959DF360734E28EB410BE0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0b58cd3f-c9bb-3905-9825-9e294cd56b55.roa
Signing time:             Sun 20 Mar 2022 04:00:00 +0000
ROA not before:           Sun 20 Mar 2022 04:00:00 +0000
ROA not after:            Mon 20 Mar 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:4b:95:9d:f3:60:73:4e:28:eb:41:0b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Mar 20 04:00:00 2022 GMT
            Not After : Mar 20 04:00:00 2023 GMT
        Subject: CN=b92c7b53-40dd-4886-9bf0-fa29b86e332e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1b:f9:96:bc:3c:ba:bb:e4:fa:2a:a1:49:88:
                    89:ab:3e:4c:40:28:51:1b:73:91:73:bc:41:14:7f:
                    ee:82:75:60:3d:6c:6e:b5:8c:b1:d3:65:5e:89:06:
                    b9:d1:81:b3:39:1a:dc:fb:0f:7a:72:fe:04:98:27:
                    12:3a:30:25:6e:a0:31:28:f3:d7:be:57:47:33:a6:
                    4f:6b:f2:97:d7:c7:7c:6d:18:63:25:82:9b:a2:67:
                    6e:ad:d3:c0:28:3b:7c:75:b7:52:6c:e8:f0:2c:2b:
                    8c:b5:c5:30:92:a3:8f:15:8c:0d:0f:06:02:51:9e:
                    96:3f:24:09:db:09:5d:c1:13:2b:94:b8:81:3e:be:
                    c5:15:b5:32:86:96:24:b1:db:a8:94:75:8a:51:26:
                    cd:af:74:38:48:5d:25:b9:bd:89:4c:a1:fc:83:d1:
                    0c:61:cc:b3:3a:92:48:d4:70:e4:a3:e8:84:5e:71:
                    d8:f0:15:0c:a1:44:d0:cc:cc:80:57:c8:15:87:16:
                    6d:d5:dc:1b:ac:0a:c5:4c:53:ca:11:d4:12:70:e2:
                    09:13:2d:56:d3:c6:39:6a:c6:91:1b:68:1d:d4:0c:
                    07:6e:a9:0e:55:7f:0f:d6:7e:5d:ea:8d:53:01:4f:
                    b9:22:34:b0:c8:2c:42:f5:25:dd:74:14:ab:49:29:
                    c2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:15:BF:63:E2:7C:BC:9F:A2:13:F3:79:EF:12:3A:17:E8:90:C4:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/0b58cd3f-c9bb-3905-9825-9e294cd56b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:80:3a:08:e6:02:fa:64:28:ca:9b:e9:13:55:74:a0:ce:68:
         16:a0:a3:06:27:c6:80:3f:b8:68:21:0b:e3:0c:d1:cd:a8:bd:
         21:af:55:85:1f:0f:81:f9:c0:43:a4:19:01:69:af:46:78:c8:
         7e:da:6e:97:f7:db:80:28:26:a9:6c:35:8d:47:ff:56:26:f9:
         d1:6d:9d:38:2d:cd:f3:66:c4:73:86:c9:04:24:2e:dc:6f:ed:
         37:68:a0:58:8b:5c:03:73:01:9c:d8:bb:84:d2:1c:c0:96:76:
         21:92:7c:06:36:2e:6d:75:81:bd:cd:b3:2e:6e:3c:d4:d1:89:
         ed:73:59:75:7e:38:c4:9f:7c:b5:c6:94:66:d6:70:9a:6f:c0:
         12:33:c1:a0:d7:58:b6:40:55:48:09:47:28:4d:af:14:64:ce:
         1c:72:9e:cb:fa:ec:cb:0f:e9:f5:c8:b9:0f:2c:3d:84:f5:00:
         11:35:0f:c8:3f:11:77:04:23:a4:dd:21:c0:d7:a9:1d:94:56:
         48:14:a4:4d:a2:0e:9a:d5:cb:40:56:39:58:e0:83:4f:9e:8c:
         44:89:e2:81:35:cf:38:28:65:4d:f5:5f:31:6c:f7:6f:c8:69:
         98:63:43:e7:95:d6:7b:b4:b7:3f:4f:f0:ce:86:c7:a3:98:dc:
         8f:8b:60:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----