Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5e16e5b2-47d1-3992-9a8d-cb2e8e49f797.roa
File:                     5e16e5b2-47d1-3992-9a8d-cb2e8e49f797.roa (raw, json)
Hash identifier:          RaoAryHzQDPwbD10bGniQ8Te7xHddG4gbf7tbmMAq28=
Subject key identifier:   2B:5B:E6:70:EF:5F:04:B2:F0:AF:41:E2:77:61:D3:17:9B:6A:9D:4D
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583CD90EB7F763AFA5820A342D40
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5e16e5b2-47d1-3992-9a8d-cb2e8e49f797.roa
Signing time:             Mon 07 Feb 2022 05:00:00 +0000
ROA not before:           Mon 07 Feb 2022 05:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:d9:0e:b7:f7:63:af:a5:82:0a:34:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Feb  7 05:00:00 2022 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=d3b54299-8f8c-44cf-9c13-0f314d9c0743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:97:c9:e3:1f:95:f7:55:80:fb:cc:56:1e:2f:
                    70:a8:1a:c9:ee:a1:28:e7:0c:37:c7:ad:6d:3e:cf:
                    c0:a7:6a:47:08:0d:75:46:c8:b0:c3:14:0d:f0:03:
                    a9:ba:12:ce:ad:a4:70:41:f6:fe:dc:7d:bd:dc:cb:
                    bb:36:9a:7b:61:2c:b7:54:a4:e7:48:6f:72:43:52:
                    65:77:22:4e:2f:f1:20:9d:5c:48:36:d7:52:4d:a1:
                    20:10:cb:e9:95:10:32:1b:73:66:69:35:2e:89:b1:
                    99:3b:db:db:ac:b7:98:77:1c:7d:18:8f:49:ea:15:
                    87:81:46:32:34:26:f6:93:43:13:44:9b:b2:03:0c:
                    3b:b2:8c:86:10:0c:c7:ca:c6:24:12:3b:7c:c0:c8:
                    29:ed:a9:0f:87:42:cd:75:2c:1f:de:d1:ad:a7:ff:
                    41:e7:cd:cd:09:89:a5:3b:56:16:81:fc:3a:d1:ed:
                    e2:a1:03:12:1c:c2:f6:b3:ad:8d:cb:8a:89:88:f0:
                    e8:e1:c5:b0:a7:4b:89:98:12:4e:e8:f3:0a:d6:fa:
                    79:f4:4b:e1:39:7c:0a:88:71:4a:55:9a:33:00:13:
                    b2:b2:cf:a5:e8:07:82:3f:f1:95:31:3d:4f:dd:84:
                    ac:8b:62:3d:07:33:e2:f9:6e:44:d1:e0:8c:22:c8:
                    95:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5B:E6:70:EF:5F:04:B2:F0:AF:41:E2:77:61:D3:17:9B:6A:9D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5e16e5b2-47d1-3992-9a8d-cb2e8e49f797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:23:f1:8d:12:01:9e:2e:1f:e8:86:63:3c:9a:0e:6a:4a:5c:
         5c:bd:d1:1b:18:1a:70:b6:cf:6d:d4:2b:18:1a:8d:14:7e:20:
         b3:e2:7e:d5:d5:c8:10:f7:fd:98:ce:39:c5:8d:ae:bd:f5:48:
         a2:83:2e:b8:bc:8c:b3:0b:93:00:06:b2:35:87:9c:dd:6f:4d:
         d7:39:62:67:2b:2f:e6:2d:81:e3:29:55:cd:01:a5:73:03:d5:
         9f:23:26:d4:07:3f:97:53:b7:e2:73:0e:1b:27:c8:f0:3f:c2:
         08:ca:d1:c3:c5:23:79:30:15:0c:98:7b:d3:e5:33:de:77:0a:
         a7:30:82:5d:ac:56:5c:84:06:ff:85:a2:b2:ea:37:a9:c7:bc:
         12:12:e1:67:5b:9b:80:91:5a:da:e0:e3:11:ec:54:8d:0e:8c:
         54:a4:f0:95:d1:f8:6d:38:ff:ea:b3:28:fb:44:83:36:12:2f:
         f4:88:e4:d5:7d:71:6d:72:7f:0c:20:ba:d4:3c:30:89:86:20:
         f1:e3:f0:28:fb:6d:29:14:d3:b4:d3:fa:b2:ba:e2:e4:10:9f:
         9e:a7:fa:f6:ad:82:93:e7:d9:3d:cc:ae:5e:93:9c:b4:62:3c:
         6f:97:f2:69:6b:57:1e:07:41:bc:e4:fb:fa:03:f1:f2:e4:d6:
         e6:dd:51:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----