Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b4a7ea1e-64e0-3f08-8fb8-e3906963a342.roa
File:                     b4a7ea1e-64e0-3f08-8fb8-e3906963a342.roa (raw, json)
Hash identifier:          1OC/SL81aIUJJ55zvPlGFWVcunjhnMj51DRBE9bUaQw=
Subject key identifier:   F3:D0:2A:69:B4:CB:C1:63:C0:12:08:C0:8C:C4:00:15:9A:76:08:1D
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583F3984D5F5443B157A5DC93540
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b4a7ea1e-64e0-3f08-8fb8-e3906963a342.roa
Signing time:             Mon 12 Sep 2022 12:00:00 +0000
ROA not before:           Mon 12 Sep 2022 12:00:00 +0000
ROA not after:            Wed 13 Sep 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:39:84:d5:f5:44:3b:15:7a:5d:c9:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Sep 12 12:00:00 2022 GMT
            Not After : Sep 13 04:00:00 2023 GMT
        Subject: CN=2e63e52c-a838-41e0-a285-c70c9a0a915d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:f6:90:97:ac:7b:d2:f1:55:f5:c1:31:69:
                    1c:ce:95:70:19:f5:26:a6:a8:d7:35:5f:c6:6f:ae:
                    65:5f:91:10:cc:3d:32:1e:74:03:c1:aa:42:bf:f7:
                    11:e3:02:fa:22:8c:06:e4:f4:79:d3:67:9c:8e:fb:
                    ab:c2:02:20:6c:d0:1f:96:87:a6:47:db:e4:7d:26:
                    ae:ff:e9:a0:50:6d:e1:66:41:ea:fb:46:d4:c2:58:
                    cd:df:bc:94:ac:a1:7b:16:b6:a0:cf:70:4a:1d:6e:
                    52:39:11:c7:19:63:d9:97:39:51:87:49:02:9f:5f:
                    92:28:be:06:a6:6f:a4:3c:3f:d6:e1:42:9c:d3:de:
                    da:56:8f:f8:19:b4:d0:99:f1:23:03:71:e7:d7:b5:
                    72:c4:53:f3:f6:48:e1:ce:90:4f:13:18:ec:8f:59:
                    15:86:d6:67:23:5b:28:8e:53:ee:1c:b5:80:c1:73:
                    d4:31:be:5b:eb:37:5a:23:01:5f:86:1f:3a:33:10:
                    d0:40:20:e2:c2:86:a5:46:e1:da:cd:dc:01:97:5c:
                    82:0a:72:4a:fe:28:c8:ec:d1:02:ab:03:8f:b4:90:
                    21:c9:76:e8:96:06:86:b8:10:3e:16:b6:57:6e:ea:
                    7c:3c:34:06:57:c9:72:cc:ca:b1:86:f9:41:40:59:
                    8c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D0:2A:69:B4:CB:C1:63:C0:12:08:C0:8C:C4:00:15:9A:76:08:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b4a7ea1e-64e0-3f08-8fb8-e3906963a342.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ce:43:32:e3:60:82:e8:f1:db:61:b0:01:a2:4d:63:ed:5a:
         40:5d:06:ca:7c:ef:53:05:1f:bb:60:52:87:bb:68:89:a9:c2:
         a0:d7:72:f3:93:84:fc:ec:1e:80:9f:ff:cf:55:5d:8c:16:0e:
         f4:cc:b9:94:c5:20:9a:08:eb:cb:f3:30:43:33:88:5c:a4:16:
         6e:ca:c3:b1:30:64:b3:c9:f0:22:4e:7a:ca:56:c9:04:6b:a3:
         07:c1:1c:9f:6f:51:4d:7a:0e:7f:8b:70:63:f0:69:ad:1d:ab:
         99:f0:8d:33:9d:80:10:3c:53:a8:a3:91:05:3a:9b:a0:d5:69:
         63:fc:f6:4e:19:38:c2:c5:1a:c9:88:55:32:5f:aa:d1:fa:0b:
         05:2c:58:05:da:cd:c4:64:08:53:6e:8d:4b:f1:0b:93:75:d0:
         78:80:ec:94:51:af:6c:d8:7e:eb:cb:7b:3d:12:bf:66:14:c8:
         ea:66:16:99:86:fc:d1:ff:00:4e:65:ef:7a:d7:76:ca:95:82:
         ef:af:43:71:3e:0f:f9:1b:69:a9:f9:c5:8a:03:7f:cd:69:f5:
         d2:78:e6:0b:71:f8:18:f0:bc:c8:e9:9c:f4:4d:21:d9:9e:c5:
         74:78:e3:19:22:26:a4:e9:94:2c:78:b1:08:ae:c6:63:25:f3:
         01:13:fb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----