Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bdea9d2d-f0d2-36b2-8f48-241ec752ba92.roa
File:                     bdea9d2d-f0d2-36b2-8f48-241ec752ba92.roa (raw, json)
Hash identifier:          GGs0wl3xOO5Y6ZefcLTuy86m8fjXbiIb+2X6SDfCJv4=
Subject key identifier:   52:C5:7F:69:15:F5:A8:50:7D:7D:46:18:A7:01:37:D9:23:7F:65:45
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583F12880CA77A762824D458C9B0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bdea9d2d-f0d2-36b2-8f48-241ec752ba92.roa
Signing time:             Mon 29 Aug 2022 12:00:00 +0000
ROA not before:           Mon 29 Aug 2022 12:00:00 +0000
ROA not after:            Wed 30 Aug 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:12:88:0c:a7:7a:76:28:24:d4:58:c9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Aug 29 12:00:00 2022 GMT
            Not After : Aug 30 04:00:00 2023 GMT
        Subject: CN=33fe9d1a-d1e3-4207-b809-54f4cbae982a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8e:9c:85:55:6d:a2:95:39:36:23:59:f3:58:
                    e2:a3:83:48:40:f4:bf:8a:1c:ea:91:df:8b:b9:29:
                    f8:07:10:98:e8:ed:52:b7:fd:d7:a9:1f:4e:49:e2:
                    ad:4c:7b:88:28:6d:7e:fb:b0:97:a4:f8:b9:92:51:
                    da:76:48:fb:4f:bd:4a:56:4e:e0:36:57:ec:25:f7:
                    07:e8:c3:0a:3e:03:f4:02:ae:b3:65:b9:e7:dc:31:
                    a4:79:13:f9:c7:24:9e:ce:d2:7a:a7:ae:6e:42:cf:
                    45:14:c3:28:9e:c6:b3:14:3a:aa:66:3f:f1:23:80:
                    20:32:65:05:03:28:62:ff:2c:4c:10:5c:00:23:c8:
                    05:67:35:59:76:ad:7b:70:ac:12:24:db:c6:9d:0a:
                    e0:3d:c0:d4:a7:ef:96:20:22:0d:19:a8:66:d1:74:
                    47:18:bd:7f:b0:ba:e9:b5:0c:72:f0:0a:1a:21:02:
                    2d:36:f3:9b:38:70:02:97:ee:25:33:cb:3d:29:67:
                    f4:f0:b2:ec:fe:f2:47:24:69:da:66:49:c0:41:5a:
                    f8:ad:66:66:8a:02:80:65:74:ad:8f:42:71:45:d5:
                    d8:6f:cf:3b:0e:15:80:eb:a1:e1:a1:bd:c5:78:df:
                    9b:5c:63:a7:a6:ee:b2:2b:c6:4a:85:65:96:38:9f:
                    a1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C5:7F:69:15:F5:A8:50:7D:7D:46:18:A7:01:37:D9:23:7F:65:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bdea9d2d-f0d2-36b2-8f48-241ec752ba92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ff:36:a6:da:c4:92:55:ea:53:b9:ad:e8:ab:94:45:8c:91:
         5b:65:6a:7b:97:58:e4:68:91:cc:0c:32:d0:d9:37:0b:7d:35:
         5f:7c:ae:d1:a1:ca:5f:5c:5e:a7:d4:03:4d:05:11:e7:50:b6:
         d5:fc:2a:55:96:4d:01:be:d1:3e:45:07:97:06:60:cf:01:57:
         8c:52:8c:ea:ef:fb:99:7f:05:d5:d0:79:2c:0e:5f:4e:09:ec:
         1c:a2:c2:13:d6:e9:b9:b1:3e:dd:ec:2e:a6:dd:c4:90:f9:49:
         1a:6d:2e:00:57:5d:9e:ee:56:0a:5c:c6:92:77:a5:39:b9:83:
         e6:06:ec:2d:75:bd:f8:ed:cb:b5:0a:98:73:72:b0:d2:b0:75:
         f1:2d:c1:f6:aa:ab:1c:55:22:63:5f:10:5a:39:d2:46:46:f3:
         e2:19:77:39:96:fa:e0:37:3b:c8:19:3c:55:00:57:9e:9d:d7:
         8e:21:ad:5b:8d:d1:78:3f:34:e7:a5:9a:da:62:90:2f:15:75:
         bd:6b:2e:fb:9c:5a:b0:63:44:46:50:87:df:ed:c1:31:15:fb:
         6f:d6:ad:ec:39:e0:49:be:d2:d2:57:cb:68:2f:fa:ec:8f:01:
         99:54:f1:a8:c5:34:61:20:d0:26:14:16:58:31:00:e0:64:2a:
         fc:3d:e0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----