Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e4d0379b-4cdf-3012-a9fe-cae716484336.roa
File:                     e4d0379b-4cdf-3012-a9fe-cae716484336.roa (raw, json)
Hash identifier:          ogc/gTmGjGsHPCLEpFY+GpoZ++L+MVDM60GkPgL8EjU=
Subject key identifier:   70:D3:2C:D0:68:43:03:39:FD:77:C4:43:A1:31:8E:7D:43:9D:2B:5D
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583DD437C40D784C69EB00F6124C
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e4d0379b-4cdf-3012-a9fe-cae716484336.roa
Signing time:             Sat 07 May 2022 12:00:00 +0000
ROA not before:           Sat 07 May 2022 12:00:00 +0000
ROA not after:            Mon 08 May 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d4:37:c4:0d:78:4c:69:eb:00:f6:12:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: May  7 12:00:00 2022 GMT
            Not After : May  8 04:00:00 2023 GMT
        Subject: CN=d6ae75b3-9297-4b81-a8d0-79ef7ad2b0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2b:66:92:19:49:71:d3:e8:6b:e3:d5:43:79:
                    10:bb:62:50:3a:21:d8:d0:0a:03:27:cd:47:c6:f2:
                    97:80:14:2d:5d:ad:02:8b:04:60:94:3e:2f:73:3c:
                    27:91:5a:46:b8:67:2f:74:23:d9:94:e9:63:19:e2:
                    cc:eb:f3:f6:2c:a7:4e:8d:89:85:7d:a3:dc:1e:1d:
                    15:3a:9e:55:50:e0:6a:bd:96:04:55:1d:8c:01:9e:
                    5d:01:b0:2e:2a:68:61:15:e1:75:87:aa:7a:65:4f:
                    d0:46:52:95:8b:f0:9d:b2:bd:9d:5b:82:84:0f:83:
                    8e:77:ea:8b:8e:d7:b3:a7:3a:65:de:65:bd:b0:c6:
                    8b:67:55:05:09:07:6d:31:af:65:0f:29:dd:55:92:
                    a1:91:a3:51:e7:ab:15:59:77:e7:be:65:ac:1f:aa:
                    39:1f:56:04:74:c2:11:46:98:49:b9:e9:6a:4a:57:
                    eb:1f:2f:3e:13:97:90:29:69:34:df:01:41:47:12:
                    ee:a0:ae:5f:63:0e:01:bc:8c:27:b1:81:09:e4:bd:
                    d6:07:a6:4f:42:99:e1:f8:b3:2b:d2:04:4d:9a:eb:
                    a1:ba:b1:f9:69:fe:87:6f:1f:7b:50:76:09:54:bf:
                    fc:d8:f2:f6:e5:7e:50:9b:3d:09:c6:f1:9d:3c:ec:
                    da:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D3:2C:D0:68:43:03:39:FD:77:C4:43:A1:31:8E:7D:43:9D:2B:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e4d0379b-4cdf-3012-a9fe-cae716484336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d0:8c:4d:c7:97:99:32:c4:11:c6:38:f8:05:35:80:a0:73:
         ef:0c:4e:5b:a0:d5:e9:17:eb:d5:ee:21:f6:bc:60:a2:22:74:
         91:00:72:ba:32:68:cf:9e:5b:2b:bd:2e:5c:96:fd:b4:bb:d5:
         46:6d:87:d5:e5:a2:ba:10:ca:ff:03:e3:3c:3a:ab:24:08:a6:
         5f:f1:98:5f:85:18:74:20:82:21:52:ce:03:74:03:8d:24:be:
         33:f5:24:9c:7a:c4:78:90:84:42:34:46:0a:ce:d6:f5:94:23:
         9d:2c:51:a5:87:1b:0d:b9:65:68:9d:44:1c:00:e1:d4:99:fc:
         30:2f:f2:bd:99:9b:b1:69:08:eb:33:e0:88:d5:3a:65:0e:d7:
         a8:6f:3c:03:e7:d4:6e:3e:cf:df:e7:56:7a:89:57:61:0f:43:
         e8:d6:a6:9b:1d:31:76:f4:e7:a4:0d:b0:92:c4:5b:ab:13:56:
         60:9c:42:71:fb:e1:f1:4a:36:9f:f5:c9:18:d5:3b:9d:33:b4:
         4d:82:09:7a:3c:45:06:9c:ec:e9:70:cf:dc:6f:b3:61:3e:f0:
         52:9b:2d:27:56:65:6a:2e:83:32:d0:0d:fb:ef:9c:21:9e:16:
         aa:09:ce:19:68:fd:0e:b7:66:20:55:16:91:9e:9d:27:79:f9:
         e5:ec:a1:e6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD3UN8QNeExp6wD2EkwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDUwNzEyMDAwMFoXDTIzMDUwODA0MDAwMFowLzEtMCsGA1UEAxMk
ZDZhZTc1YjMtOTI5Ny00YjgxLWE4ZDAtNzllZjdhZDJiMGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCtmkhlJcdPoa+PVQ3kQu2JQOiHY0AoDJ81H
xvKXgBQtXa0CiwRglD4vczwnkVpGuGcvdCPZlOljGeLM6/P2LKdOjYmFfaPcHh0V
Op5VUOBqvZYEVR2MAZ5dAbAuKmhhFeF1h6p6ZU/QRlKVi/Cdsr2dW4KED4OOd+qL
jtezpzpl3mW9sMaLZ1UFCQdtMa9lDyndVZKhkaNR56sVWXfnvmWsH6o5H1YEdMIR
RphJuelqSlfrHy8+E5eQKWk03wFBRxLuoK5fYw4BvIwnsYEJ5L3WB6ZPQpnh+LMr
0gRNmuuhurH5af6Hbx97UHYJVL/82PL25X5Qmz0JxvGdPOzazwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHDTLNBoQwM5/XfEQ6Exjn1DnStdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvZTRkMDM3OWItNGNkZi0z
MDEyLWE5ZmUtY2FlNzE2NDg0MzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGvQjE3Hl5kyxBHGOPgFNYCgc+8MTlug1ekX69XuIfa8YKIidJEA
croyaM+eWyu9LlyW/bS71UZth9XloroQyv8D4zw6qyQIpl/xmF+FGHQggiFSzgN0
A40kvjP1JJx6xHiQhEI0RgrO1vWUI50sUaWHGw25ZWidRBwA4dSZ/DAv8r2Zm7Fp
COsz4IjVOmUO16hvPAPn1G4+z9/nVnqJV2EPQ+jWppsdMXb056QNsJLEW6sTVmCc
QnH74fFKNp/1yRjVO50ztE2CCXo8RQac7Olwz9xvs2E+8FKbLSdWZWougzLQDfvv
nCGeFqoJzhlo/Q63ZiBVFpGenSd5+eXsoeY=
-----END CERTIFICATE-----