Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bcc395c8-66d6-3c3e-b860-43e77c1c97d5.roa
File:                     bcc395c8-66d6-3c3e-b860-43e77c1c97d5.roa (raw, json)
Hash identifier:          HV3+J3s/wCtuqBJ/BRxZXh30P5cez2Du99rYEXRmWmw=
Subject key identifier:   CC:98:A4:09:4F:5D:DC:BB:11:03:47:E0:74:AA:8E:C6:FC:8C:C4:4D
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583DC312C52672011B763D755F00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bcc395c8-66d6-3c3e-b860-43e77c1c97d5.roa
Signing time:             Sun 01 May 2022 12:00:00 +0000
ROA not before:           Sun 01 May 2022 12:00:00 +0000
ROA not after:            Tue 02 May 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c3:12:c5:26:72:01:1b:76:3d:75:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: May  1 12:00:00 2022 GMT
            Not After : May  2 04:00:00 2023 GMT
        Subject: CN=9239061b-8707-482b-9f14-052905ff21eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1f:09:82:6d:4b:dc:67:de:ce:6d:99:c1:1c:
                    cf:e7:fd:8e:0d:b2:08:44:00:1f:64:b0:07:c6:20:
                    56:55:4a:71:41:cf:d9:33:b1:5e:4e:d0:82:1d:ee:
                    9a:b5:f4:9d:1d:59:62:04:2f:19:d1:cd:0c:de:f6:
                    5e:ef:da:a7:d6:74:d6:84:56:36:fb:68:a8:b4:5c:
                    62:fd:68:1d:f7:05:82:43:cc:13:84:a5:4a:6e:00:
                    dd:77:8c:00:3f:54:12:50:83:3f:3b:51:4f:3f:32:
                    3b:23:01:a4:66:16:02:0a:19:60:45:f0:54:90:e8:
                    cc:8f:0e:aa:2f:ee:ae:96:68:57:c1:89:d2:62:fd:
                    71:c2:cb:64:85:d3:05:c6:b0:70:59:71:82:bf:99:
                    48:7e:c9:64:55:bd:35:f5:82:8d:4b:8a:1a:8c:73:
                    b7:9a:08:be:b0:06:c6:a1:1f:cb:ec:4e:a1:ca:e6:
                    27:67:48:7c:1e:01:7d:4d:c9:ec:67:f2:59:88:18:
                    2f:e6:92:10:80:d9:2d:e7:6e:97:cc:24:c6:c8:fa:
                    66:4b:9e:9e:4a:3b:6e:f3:a5:cf:82:ab:be:d9:9a:
                    ed:1b:39:8b:87:53:14:6c:2e:6f:77:6b:c7:52:96:
                    fe:b3:48:16:82:54:63:40:74:51:91:8e:bf:68:9a:
                    88:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:98:A4:09:4F:5D:DC:BB:11:03:47:E0:74:AA:8E:C6:FC:8C:C4:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bcc395c8-66d6-3c3e-b860-43e77c1c97d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1c:99:57:7f:3e:84:f7:a5:e9:a4:9f:42:c7:3e:34:a0:a5:
         33:3a:d6:cb:98:48:2d:55:c1:30:b4:93:9e:e2:fc:b5:ca:62:
         8d:5e:ee:b4:d6:a2:6c:ce:6e:8e:25:7b:3e:c3:83:ac:64:d2:
         a5:a6:84:a1:20:97:57:ef:67:56:b2:3a:58:57:26:74:e7:dc:
         fc:6f:92:ea:cb:3f:fb:89:97:c4:a8:8c:50:6e:d3:04:4e:5c:
         52:c4:99:ef:ad:ce:3e:33:37:bf:67:97:f5:33:bd:78:6b:fb:
         5c:d3:ac:46:04:07:3f:d3:f8:40:f5:86:06:89:68:5d:36:8d:
         22:61:ef:57:d6:f1:86:2c:69:4f:9d:9d:74:99:40:9b:c3:bc:
         c8:fc:7d:97:db:82:b1:2b:e6:a2:19:80:53:3c:50:f9:2d:04:
         19:b7:66:27:78:50:ae:1d:1d:bb:96:30:36:19:6f:d2:fa:50:
         f4:6f:be:1a:27:c3:ca:42:be:ed:41:c0:48:9e:9b:3c:2a:db:
         84:cb:bb:6e:ad:f0:7a:d8:48:d3:e5:b1:5c:34:8b:9f:84:e8:
         28:17:c1:32:64:39:6f:d9:a6:41:67:31:25:b1:7a:d6:03:55:
         3b:f3:f5:a2:cd:7a:bd:bf:b2:8a:c6:c5:4c:f3:75:d0:2e:31:
         2b:dd:92:1b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD3DEsUmcgEbdj11XwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDUwMTEyMDAwMFoXDTIzMDUwMjA0MDAwMFowLzEtMCsGA1UEAxMk
OTIzOTA2MWItODcwNy00ODJiLTlmMTQtMDUyOTA1ZmYyMWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth8Jgm1L3Gfezm2ZwRzP5/2ODbIIRAAfZLAH
xiBWVUpxQc/ZM7FeTtCCHe6atfSdHVliBC8Z0c0M3vZe79qn1nTWhFY2+2iotFxi
/Wgd9wWCQ8wThKVKbgDdd4wAP1QSUIM/O1FPPzI7IwGkZhYCChlgRfBUkOjMjw6q
L+6ulmhXwYnSYv1xwstkhdMFxrBwWXGCv5lIfslkVb019YKNS4oajHO3mgi+sAbG
oR/L7E6hyuYnZ0h8HgF9TcnsZ/JZiBgv5pIQgNkt526XzCTGyPpmS56eSjtu86XP
gqu+2ZrtGzmLh1MUbC5vd2vHUpb+s0gWglRjQHRRkY6/aJqI2wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMyYpAlPXdy7EQNH4HSqjsb8jMRNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvYmNjMzk1YzgtNjZkNi0z
YzNlLWI4NjAtNDNlNzdjMWM5N2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABkcmVd/PoT3pemkn0LHPjSgpTM61suYSC1VwTC0k57i/LXKYo1e
7rTWomzObo4lez7Dg6xk0qWmhKEgl1fvZ1ayOlhXJnTn3PxvkurLP/uJl8SojFBu
0wROXFLEme+tzj4zN79nl/UzvXhr+1zTrEYEBz/T+ED1hgaJaF02jSJh71fW8YYs
aU+dnXSZQJvDvMj8fZfbgrEr5qIZgFM8UPktBBm3Zid4UK4dHbuWMDYZb9L6UPRv
vhonw8pCvu1BwEiemzwq24TLu26t8HrYSNPlsVw0i5+E6CgXwTJkOW/ZpkFnMSWx
etYDVTvz9aLNer2/sorGxUzzddAuMSvdkhs=
-----END CERTIFICATE-----