Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/0/326130623a396534303a3a2f32392d3239203d3e20323135343336.roa
File:                     326130623a396534303a3a2f32392d3239203d3e20323135343336.roa (raw, json)
Hash identifier:          +QlEViuX5nyF8k3pr21vZX2SNReNUL1Em1YTgB3ix1E=
Subject key identifier:   78:78:5A:24:1A:51:1C:4E:38:BE:84:CD:4A:81:57:1A:E5:84:0B:4E
Certificate issuer:       /CN=7A7ECB46F513D542514E077E26624E43153E7F2C
Certificate serial:       0C992D627EB00565120A137A7BB7E3605D477863
Authority key identifier: 7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534303a3a2f32392d3239203d3e20323135343336.roa
Signing time:             Tue 28 May 2024 09:22:58 +0000
ROA not before:           Tue 28 May 2024 09:17:58 +0000
ROA not after:            Tue 27 May 2025 09:22:58 +0000
asID:                     215436
IP address blocks:        2a0b:9e40::/29 maxlen: 29

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:99:2d:62:7e:b0:05:65:12:0a:13:7a:7b:b7:e3:60:5d:47:78:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7ECB46F513D542514E077E26624E43153E7F2C
        Validity
            Not Before: May 28 09:17:58 2024 GMT
            Not After : May 27 09:22:58 2025 GMT
        Subject: CN=78785A241A511C4E38BE84CD4A81571AE5840B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:77:c0:d1:f6:fb:27:25:2b:49:c7:cf:1d:15:
                    d5:ce:33:ff:bd:8e:18:6b:4b:64:0e:0b:b3:4c:7a:
                    b2:16:8f:9d:10:6e:f2:c1:cb:7f:a3:dc:ed:7c:18:
                    98:70:ed:5f:40:99:20:50:74:21:7d:15:d6:e8:00:
                    08:3b:04:6f:43:0c:c0:0c:e0:b6:8a:5c:81:96:71:
                    c6:b1:86:60:29:ab:0a:08:ff:fe:64:15:a3:ec:70:
                    e9:83:22:46:c4:a1:3c:aa:eb:bf:61:a0:6d:d4:e8:
                    d0:24:25:5a:dd:96:88:5c:dc:c4:68:27:03:8f:37:
                    b3:c9:94:11:ec:52:42:0d:67:f0:c1:b8:21:30:4f:
                    38:52:9d:a7:14:5e:5a:35:21:76:ab:13:e7:96:fb:
                    a1:ae:45:bd:79:6b:1a:b1:71:37:69:0d:9b:fa:7c:
                    6e:84:8b:f2:86:1f:b4:4d:7a:42:47:d5:49:f2:7b:
                    ed:b1:4c:73:6c:21:64:48:1d:c0:08:51:1f:f3:55:
                    78:c9:ad:f4:d4:d5:05:4f:58:84:bb:7a:68:55:25:
                    f4:1f:6a:48:c9:96:b0:3b:42:fd:58:98:5a:11:9c:
                    03:20:db:ca:ea:eb:20:ed:ab:f8:33:24:55:9a:19:
                    17:96:cb:5c:b7:60:97:5d:e0:67:ba:17:87:cc:e7:
                    0d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:78:5A:24:1A:51:1C:4E:38:BE:84:CD:4A:81:57:1A:E5:84:0B:4E
            X509v3 Authority Key Identifier:
                keyid:7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534303a3a2f32392d3239203d3e20323135343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:9e40::/29

    Signature Algorithm: sha256WithRSAEncryption
         30:bb:c1:90:06:d7:64:a2:b8:f7:2e:04:ef:c4:1b:78:b9:b9:
         ed:c3:63:45:56:0d:e1:8f:a2:9f:e7:0d:71:dd:db:0b:be:a9:
         71:28:f5:d7:7e:63:09:59:8a:d6:ac:ff:b7:c4:c6:41:ef:84:
         68:d7:60:eb:2f:ad:ce:ec:c2:57:69:97:f1:10:fb:1d:4c:c6:
         55:43:3b:31:9b:d2:aa:19:f0:90:4c:9a:19:a8:0d:0f:07:8b:
         66:eb:64:f4:a9:40:50:22:f8:5d:28:67:51:8d:bf:66:38:6f:
         3e:98:ec:51:c5:d9:53:63:12:70:69:2b:3b:91:88:39:d7:9e:
         3a:ef:61:26:cf:7b:19:c4:48:54:b1:fe:f7:08:c7:35:59:b0:
         71:25:93:d2:16:04:5e:db:df:06:aa:2e:28:19:82:a5:84:cf:
         68:9b:93:5e:fc:ba:11:1b:4f:e4:f0:91:83:00:ab:c7:56:12:
         56:55:93:fe:a1:6f:44:db:22:b0:41:5a:b7:90:bc:4e:27:0e:
         7b:7e:9c:73:93:ef:58:fa:ec:58:6b:f1:28:71:97:c8:62:0c:
         e1:98:0c:bc:5b:2d:bc:61:d7:e3:bc:bc:60:d0:c7:6f:50:ba:
         9e:ae:a4:bc:35:49:eb:f1:69:12:46:ef:1e:b8:e3:00:41:3a:
         49:df:45:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----