Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/62d7c0ae-e756-3b1a-8296-cfe5c594af03.roa
File:                     62d7c0ae-e756-3b1a-8296-cfe5c594af03.roa (raw, json)
Hash identifier:          +PwWux/6t5rsPo93zBXotu3jbKEjp941nnmn1ozcUg0=
Subject key identifier:   C9:12:C4:99:53:25:A8:18:84:28:D8:46:2C:6F:1E:E0:80:84:00:82
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583D5C2E827457EFF4D4BDF8F280
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/62d7c0ae-e756-3b1a-8296-cfe5c594af03.roa
Signing time:             Sat 26 Mar 2022 04:00:00 +0000
ROA not before:           Sat 26 Mar 2022 04:00:00 +0000
ROA not after:            Sun 26 Mar 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5c:2e:82:74:57:ef:f4:d4:bd:f8:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Mar 26 04:00:00 2022 GMT
            Not After : Mar 26 04:00:00 2023 GMT
        Subject: CN=b4282c18-a755-4e60-b996-ea7fede4cbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:60:b8:8c:01:29:49:a0:f0:df:32:e0:11:83:
                    62:fa:68:8f:b4:48:cc:74:25:6b:42:41:c6:1d:0c:
                    ae:18:2a:bb:a9:2b:c8:6d:ec:a2:b4:d5:51:cb:5b:
                    84:5b:68:96:f5:c6:49:eb:4e:f7:36:2e:15:a8:d4:
                    40:1f:71:a9:ec:78:57:fd:b3:51:0c:2d:1e:fe:92:
                    1f:90:a0:cb:bc:35:fd:9a:2d:fa:c2:cc:dd:42:0a:
                    fb:2b:d7:a0:0c:61:ce:79:08:cf:7d:76:b0:a1:02:
                    e1:99:13:19:95:60:ef:71:d0:ed:18:60:85:fa:e5:
                    85:0e:9d:49:a8:51:3c:02:7e:56:2f:6a:5d:25:8f:
                    7b:0a:6f:4c:1e:30:26:9b:13:86:ff:09:7d:36:95:
                    94:3e:f7:ac:40:cc:62:8e:88:67:63:a1:0e:f5:2f:
                    c4:ad:3e:6c:26:56:fc:2b:a7:6b:31:2f:6e:3d:d5:
                    92:33:cd:4c:95:de:d0:55:39:f0:62:c0:cf:66:7e:
                    64:68:41:44:31:8e:69:b1:e5:56:98:f8:3e:68:9f:
                    68:eb:51:92:a7:4e:eb:5f:ce:e2:6c:38:8d:e2:07:
                    b5:5f:8c:33:f1:96:7e:bf:67:55:f4:87:5a:7a:b8:
                    89:55:7f:05:b8:d4:21:0a:34:ad:af:52:f6:74:d6:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:12:C4:99:53:25:A8:18:84:28:D8:46:2C:6F:1E:E0:80:84:00:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/62d7c0ae-e756-3b1a-8296-cfe5c594af03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4e:e5:9e:f3:ab:30:cd:8c:20:58:80:5c:f1:5e:7f:ce:d6:
         3b:47:4d:9a:37:b8:49:d7:c2:bd:5d:aa:1f:8c:30:72:43:5c:
         9e:0a:0f:c7:8d:af:04:a8:c3:7a:c9:56:8e:16:c9:8b:c4:9c:
         9e:1f:8a:78:80:df:f7:1f:62:e0:c7:6b:9b:cc:11:33:31:f5:
         42:97:c7:1e:2a:d6:83:b1:74:8b:af:41:ae:36:fe:e6:c4:9f:
         20:ad:df:f6:06:d3:5d:30:7e:90:45:46:d0:40:11:07:74:68:
         03:22:ad:42:18:cb:f0:3c:95:15:c1:1f:4b:a4:e2:c9:3f:9f:
         73:2d:7e:6c:37:85:37:ce:34:d8:8b:cf:2d:1c:e1:e1:b1:3c:
         01:4f:45:9a:83:50:ea:81:10:fb:f1:30:1a:fe:f9:81:a1:0b:
         83:f0:bd:11:eb:8e:66:cc:8b:c3:d9:31:37:ed:bd:18:ce:76:
         67:22:fb:28:63:51:75:e1:01:58:75:02:d7:07:80:30:4a:44:
         05:d8:e1:a0:f7:27:25:84:67:90:6e:e3:a2:62:b4:04:24:1f:
         77:dc:20:cc:c0:30:8d:59:08:3e:14:ab:3c:fd:96:db:d6:04:
         68:2d:04:81:71:6b:81:a5:27:eb:59:58:5c:5b:c3:d1:11:c1:
         6c:37:48:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----