Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/69edbcaa-8f47-3378-a134-a65be9d1ed08.roa
File:                     69edbcaa-8f47-3378-a134-a65be9d1ed08.roa (raw, json)
Hash identifier:          je5uoIbTzMXI2sGN5fBRV9+YhH2v0hhGA1a4/HQoZcw=
Subject key identifier:   C8:EE:99:F0:44:1E:6B:A0:1A:18:2F:59:BA:F3:3F:CC:CC:FF:03:81
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583CCDEE44CB423886B5F430CFC0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/69edbcaa-8f47-3378-a134-a65be9d1ed08.roa
Signing time:             Thu 03 Feb 2022 05:00:00 +0000
ROA not before:           Thu 03 Feb 2022 05:00:00 +0000
ROA not after:            Fri 03 Feb 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:cd:ee:44:cb:42:38:86:b5:f4:30:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Feb  3 05:00:00 2022 GMT
            Not After : Feb  3 05:00:00 2023 GMT
        Subject: CN=ed0a93c1-3391-4109-907b-43e51610f1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9f:d7:31:06:25:5f:9b:27:1d:49:c4:99:7b:
                    d5:c8:ef:d8:ab:9d:39:8c:cd:fc:2d:26:5a:c4:e6:
                    b7:92:5a:36:6c:a7:b4:ab:5e:ff:ab:ff:90:c6:76:
                    e9:22:fd:1e:83:14:2b:99:fe:f9:4a:6c:2f:7d:99:
                    45:42:27:7e:81:d1:6a:68:5d:ae:b9:79:b5:bd:5b:
                    f9:fe:b8:2c:b4:b0:3a:97:72:1d:41:c7:01:1d:a2:
                    39:cc:18:aa:4e:d1:ed:02:03:cf:5d:bc:fc:11:52:
                    17:a8:f0:44:bc:cc:70:2c:d6:64:94:80:f5:ba:99:
                    fb:24:f5:2d:5d:96:69:6a:a7:f3:9a:e0:88:6b:33:
                    a3:23:35:30:76:0f:38:9c:1a:24:6f:38:3b:d2:5f:
                    06:36:4e:99:75:c1:9a:a0:40:6e:a2:8a:89:2f:fd:
                    b3:c4:78:73:f1:a4:84:31:68:4c:e3:a2:98:d3:b4:
                    cb:be:63:5d:a6:8d:b7:e9:37:05:ec:d8:3b:9e:86:
                    79:4c:c1:09:09:6a:8c:f3:36:8b:ae:38:a8:3a:04:
                    61:de:b6:f8:bf:aa:f1:cc:dc:c0:83:10:2a:c7:aa:
                    b4:d0:ae:53:52:c2:65:55:2b:a0:78:3c:c9:c4:71:
                    fb:25:e3:c3:80:ae:36:3f:b9:6d:c8:32:e7:37:c5:
                    2b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EE:99:F0:44:1E:6B:A0:1A:18:2F:59:BA:F3:3F:CC:CC:FF:03:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/69edbcaa-8f47-3378-a134-a65be9d1ed08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e2:62:2a:06:e6:6a:ad:50:80:be:32:39:db:fc:c0:e6:47:
         c2:3f:6e:e2:c7:74:bf:c8:52:58:ac:6f:6a:e0:7f:e6:ed:72:
         35:fe:f0:e4:dc:d5:56:d3:62:c1:90:78:71:ef:79:d1:7f:4a:
         fa:84:a3:bd:ca:9e:a3:c0:dc:26:49:d3:53:dd:3e:72:12:1d:
         7c:db:cc:0e:bc:10:36:e0:3d:a3:63:d1:16:55:d7:51:bd:7f:
         c4:c3:33:2d:3a:a7:da:f5:a0:9c:25:ad:6a:21:49:0b:c0:bd:
         1e:30:8b:f9:39:f4:11:74:81:4a:a7:dc:08:55:40:c0:f1:44:
         7e:89:3f:6b:1e:5e:69:e0:1d:bc:d6:f9:d7:43:16:e7:30:b4:
         0e:c0:6e:ca:ef:6f:e0:c4:2a:06:f2:07:99:92:c9:32:3d:6b:
         b0:0a:38:2c:0a:da:81:ca:63:33:9a:3e:c2:33:e5:95:ae:b8:
         32:a5:d2:cd:5e:ba:cd:b3:eb:00:d0:2a:80:d6:13:b7:58:82:
         ee:ed:cc:ba:0e:62:4d:bd:8d:95:42:30:2b:b8:6d:d1:98:52:
         d3:72:d5:7c:1c:10:52:8f:74:6f:0b:67:07:1b:cd:8f:0c:41:
         45:58:4b:8d:b2:62:de:86:a7:40:04:ed:38:02:55:57:0f:79:
         d5:ad:75:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----