Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/54dac445-49de-3c77-a3de-85160b420ffd.roa
File:                     54dac445-49de-3c77-a3de-85160b420ffd.roa (raw, json)
Hash identifier:          sOq6HJdj6OJpEYtLn5p62Z+bE+WR2wtMv2qtZu2om/g=
Subject key identifier:   1A:25:22:7B:14:5E:A8:37:12:8B:AF:97:14:CA:91:DC:14:BE:0E:E2
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583F1D5ED2C52D1B608A632012D0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/54dac445-49de-3c77-a3de-85160b420ffd.roa
Signing time:             Fri 02 Sep 2022 12:00:00 +0000
ROA not before:           Fri 02 Sep 2022 12:00:00 +0000
ROA not after:            Sun 03 Sep 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:1d:5e:d2:c5:2d:1b:60:8a:63:20:12:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Sep  2 12:00:00 2022 GMT
            Not After : Sep  3 04:00:00 2023 GMT
        Subject: CN=51ce6b14-fa9a-47a5-b21c-c8e0a56b1644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:97:52:a8:f7:43:49:b8:bb:31:fe:71:3a:0b:
                    35:00:74:e6:83:3d:e0:d2:a3:8e:47:4e:a5:63:92:
                    56:c5:02:79:84:37:20:05:51:fe:0c:2d:39:13:f4:
                    39:c3:02:99:38:26:9a:9a:ad:ee:4d:40:08:c4:73:
                    48:88:85:ae:49:3e:50:75:22:d1:0c:42:bd:75:08:
                    5c:1b:4f:4f:45:ca:2e:fb:3c:8a:fc:67:2b:d3:bc:
                    5b:4a:44:7b:b3:b0:0b:d2:34:91:8f:39:80:6b:a3:
                    1b:79:0e:99:3c:a5:73:47:52:1e:2f:70:dd:a7:e8:
                    0e:36:b9:92:57:d3:22:2a:0f:08:7e:41:f4:c0:a3:
                    f6:79:c0:ee:1a:25:cf:eb:7b:88:06:78:b6:27:c9:
                    b5:99:1a:7c:8f:b4:93:67:75:63:71:db:6c:ba:32:
                    2a:6d:30:a5:6a:7b:bc:50:c3:c8:a0:72:06:d3:fc:
                    14:02:11:e2:83:92:27:93:b6:56:9c:0b:b0:ab:41:
                    d4:7b:64:8e:44:4f:91:56:b0:ce:67:db:d2:cf:62:
                    8b:70:4a:7b:64:a9:4d:96:e9:03:55:a8:f6:a9:9c:
                    c7:dc:c3:b4:fc:a2:c2:62:71:ab:d5:2f:6f:1a:db:
                    b8:23:8c:9f:d2:42:ff:e0:e8:f6:14:16:a2:fb:48:
                    8a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:25:22:7B:14:5E:A8:37:12:8B:AF:97:14:CA:91:DC:14:BE:0E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/54dac445-49de-3c77-a3de-85160b420ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:7e:bd:4c:05:96:42:e1:5a:ef:dd:96:b6:70:08:6b:86:fa:
         f8:9c:20:3d:14:b8:4b:e6:a5:74:cd:2c:26:9b:91:5f:78:dd:
         2a:d2:f2:07:4e:1c:ad:54:10:5f:af:e4:99:77:68:e1:ce:90:
         92:69:16:15:90:0e:aa:5b:2a:a3:e3:32:5d:12:d2:5a:dd:00:
         8c:34:cb:90:6b:22:58:fd:f2:de:43:7d:a2:f4:16:be:6d:4c:
         70:5b:e1:0c:9e:fb:13:f8:06:9a:b9:d2:17:85:89:86:ff:ce:
         0a:9d:47:2f:0b:16:d2:e8:c3:4f:0e:52:db:89:b6:ce:30:b7:
         dd:49:f7:a1:cb:fb:21:3b:59:40:2c:e5:1e:0b:f9:60:78:2c:
         f2:92:23:78:3d:f2:7d:b9:8a:a7:11:7b:68:ba:fd:55:db:45:
         69:b9:6d:d1:45:52:eb:98:5b:7b:d5:7d:ec:1f:d9:c6:a6:f7:
         54:80:2c:a5:76:d8:70:50:6f:48:70:d4:d0:8d:37:cb:f8:0d:
         7c:5d:b4:24:62:07:9f:d1:a6:6c:ce:6e:56:09:be:fa:eb:9e:
         b8:9d:8f:2b:90:85:fc:fb:f7:ab:63:ef:a1:fe:c9:50:30:65:
         f9:e5:b6:59:6b:f5:90:74:f1:fb:1f:20:a7:d3:aa:30:28:09:
         49:49:60:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----