Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fa89dc84-246d-3972-b279-871c02b2087d.roa
File:                     fa89dc84-246d-3972-b279-871c02b2087d.roa (raw, json)
Hash identifier:          MHoQE9fMIQPK58UxXdtgAIDxB5J7tJZ2CxO6yDLm1qo=
Subject key identifier:   FE:46:F6:84:BC:59:7C:2B:C8:70:7C:EF:CD:BA:D8:96:CE:92:71:68
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583F9869BAB5C09010B66D93D300
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fa89dc84-246d-3972-b279-871c02b2087d.roa
Signing time:             Sun 16 Oct 2022 12:00:00 +0000
ROA not before:           Sun 16 Oct 2022 12:00:00 +0000
ROA not after:            Tue 17 Oct 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:98:69:ba:b5:c0:90:10:b6:6d:93:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Oct 16 12:00:00 2022 GMT
            Not After : Oct 17 04:00:00 2023 GMT
        Subject: CN=47942ffc-ea38-430d-87bd-6bedba9deb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0b:85:4e:ae:72:47:97:f3:69:b1:8b:ea:42:
                    84:e0:f5:e4:f0:76:be:9d:cb:ad:22:f6:d7:ef:8a:
                    d7:d6:18:23:30:65:9e:e3:db:25:22:1c:6e:26:29:
                    da:b3:07:bf:e3:80:39:60:02:de:75:c4:cc:3f:3a:
                    04:1b:dc:11:33:94:fe:ba:30:19:b7:57:f1:96:8b:
                    55:bb:91:d6:dc:e2:9d:46:1f:6a:8c:b1:14:2e:8f:
                    0f:16:a7:77:0b:a7:cc:6f:99:c6:53:70:9e:63:f9:
                    6d:86:dd:96:a5:1f:f2:0b:1e:df:7b:2e:c0:32:ff:
                    dd:a3:ea:89:81:8e:c6:fa:0d:34:b9:f4:0e:bd:dc:
                    b7:b6:46:67:0d:19:c0:84:bf:a5:8e:c2:f3:04:9c:
                    0f:78:26:da:2d:3b:0b:4c:06:a1:c2:54:80:b2:a8:
                    eb:52:c7:1b:07:c6:85:39:7e:d4:53:e2:93:f7:e1:
                    39:60:c3:c6:a7:c5:33:ea:03:06:07:5b:ea:69:61:
                    d9:75:96:ce:6e:3a:87:4e:87:88:5c:aa:e5:a6:58:
                    8e:d5:23:55:85:5e:1b:f1:3e:75:fb:27:4d:7f:87:
                    82:d5:97:a5:30:eb:5d:1a:90:d2:25:17:dd:19:0f:
                    2d:47:97:ba:fd:92:7a:5c:7f:c9:9c:b3:16:f2:00:
                    6b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:46:F6:84:BC:59:7C:2B:C8:70:7C:EF:CD:BA:D8:96:CE:92:71:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fa89dc84-246d-3972-b279-871c02b2087d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:97:0e:4b:25:59:65:d8:b6:d4:5d:ac:01:86:73:8b:84:e7:
         ae:60:7a:24:bb:32:7e:30:69:97:e0:76:f7:89:f2:aa:d3:e7:
         fa:9c:6d:6b:82:fc:a3:e4:e0:98:72:fd:03:04:cf:b3:30:b3:
         0b:57:e4:05:06:c0:53:df:02:f1:0a:4c:27:c9:f5:53:8d:35:
         1a:97:51:b2:e6:0b:3b:9f:b9:ef:f6:1f:8f:11:61:74:39:70:
         90:9a:b2:88:04:af:24:42:5a:eb:c4:ed:a5:96:44:c4:ff:bf:
         1f:61:63:f9:ae:97:9f:13:f6:83:49:e6:9a:e1:f6:2d:0e:a3:
         aa:b5:a1:ec:f9:dc:42:d5:96:e2:fe:47:b4:df:e1:20:c0:a6:
         fc:2d:66:9d:b0:70:43:dc:ec:70:ca:2f:6b:e1:f7:a0:3d:05:
         cd:45:dd:99:51:60:7b:50:d8:7c:ec:b4:bd:1f:57:d2:e5:a8:
         aa:49:b3:84:cd:ce:e4:2c:e7:b0:af:61:e9:91:07:be:fc:8d:
         d2:44:ab:09:13:02:3b:98:6d:07:de:d2:a1:5d:20:ba:a6:94:
         f5:85:3c:05:9a:ab:45:33:69:02:d8:87:f5:2b:b2:36:54:b0:
         b6:9d:d5:5b:bf:2e:30:22:2c:50:75:80:dc:3f:b5:dc:11:20:
         79:b9:f1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----