Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/0/326130623a396534313a3a2f33322d3438203d3e20323135343336.roa
File:                     326130623a396534313a3a2f33322d3438203d3e20323135343336.roa (raw, json)
Hash identifier:          LmXy9mH+TMIpS1D0YU/TgELoKbI7ulS8PPjLqmtDZw0=
Subject key identifier:   A2:34:E8:07:7F:E9:02:12:02:7D:88:A3:46:59:FD:50:9E:72:9D:3E
Certificate issuer:       /CN=7A7ECB46F513D542514E077E26624E43153E7F2C
Certificate serial:       7F720B270685999F8B68BCF6270D5FC5086822F1
Authority key identifier: 7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534313a3a2f33322d3438203d3e20323135343336.roa
Signing time:             Thu 13 Jun 2024 20:15:57 +0000
ROA not before:           Thu 13 Jun 2024 20:10:57 +0000
ROA not after:            Thu 12 Jun 2025 20:15:57 +0000
asID:                     215436
IP address blocks:        2a0b:9e41::/32 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:72:0b:27:06:85:99:9f:8b:68:bc:f6:27:0d:5f:c5:08:68:22:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7ECB46F513D542514E077E26624E43153E7F2C
        Validity
            Not Before: Jun 13 20:10:57 2024 GMT
            Not After : Jun 12 20:15:57 2025 GMT
        Subject: CN=A234E8077FE90212027D88A34659FD509E729D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:19:e5:eb:60:00:c7:f6:2d:12:29:de:27:e3:
                    d0:40:e5:8c:02:ba:44:97:64:68:cd:9b:0b:26:2d:
                    c3:9e:dc:74:9e:04:9a:de:5c:a7:36:7a:a0:e0:93:
                    6f:12:5d:7a:1b:22:aa:3c:e3:b0:87:a3:b1:cf:71:
                    eb:d1:3d:f0:5e:c9:fd:5f:dc:c9:a8:48:bb:3e:e9:
                    b0:a7:72:80:9c:c4:d4:ca:24:a5:23:f0:eb:88:8e:
                    8b:2d:ae:05:63:a1:d4:d3:1b:86:d3:ad:c9:03:2d:
                    c9:a5:87:76:71:b2:ce:fa:4a:a2:eb:81:25:a4:d3:
                    bf:7c:d6:65:54:dc:56:df:5c:be:1f:36:fe:63:d7:
                    8f:d6:ad:12:25:9c:38:46:1b:29:30:4b:16:c2:a1:
                    55:c0:7b:d2:5a:da:b2:3d:95:51:43:6d:e9:4c:6f:
                    65:91:40:5c:67:02:80:e6:9c:cc:c8:74:a6:e2:f2:
                    79:52:c2:20:82:d1:f8:ec:f1:bf:88:23:fd:c5:40:
                    0f:30:3b:e4:5c:f2:b3:bf:8c:3b:00:00:82:3f:9c:
                    d6:2e:a5:6b:07:85:bc:e2:7f:c2:05:11:67:65:6a:
                    47:de:96:f9:10:64:d1:b3:4c:41:55:e9:16:d9:a0:
                    35:72:6d:3f:b7:f9:25:54:5c:21:11:93:b4:16:b2:
                    30:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:34:E8:07:7F:E9:02:12:02:7D:88:A3:46:59:FD:50:9E:72:9D:3E
            X509v3 Authority Key Identifier:
                keyid:7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534313a3a2f33322d3438203d3e20323135343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:9e41::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:fe:79:d6:aa:6a:97:8d:ca:a9:1e:e7:59:92:1f:2e:e4:1b:
         32:80:d9:16:52:6f:0f:fb:ed:3a:6a:3a:a9:21:d1:f5:8b:18:
         d0:0e:0a:de:8f:fb:aa:74:40:1b:ca:d0:ce:02:2e:3c:a0:60:
         7a:de:4b:8c:b3:87:9b:3d:07:15:1d:df:64:48:9f:f2:42:91:
         b4:bb:f4:62:6a:27:95:5d:6a:6f:21:c6:59:30:d3:85:15:ef:
         dc:69:fc:7b:d2:10:ff:d9:05:85:46:a7:3e:cb:c2:4e:23:6f:
         86:4f:c5:fd:d1:08:78:bd:a7:7a:11:24:13:43:52:b7:97:ab:
         2e:e4:48:b8:47:65:df:6b:8b:ec:83:fc:dc:9a:04:64:eb:a4:
         84:58:25:b5:88:63:89:a5:aa:f9:70:d5:6b:4d:69:5d:e4:1f:
         f3:09:37:c0:3a:02:7d:64:bc:7b:6b:73:5c:c1:02:6b:37:e5:
         72:1d:ee:95:d9:7b:bc:34:9a:98:34:d4:ed:52:e0:f3:71:64:
         19:9f:7c:ea:9b:7f:43:41:c8:82:c7:a7:ff:1e:86:c4:5c:ee:
         c0:02:9f:9c:29:e3:b7:24:7d:97:dd:0a:dd:0d:1c:76:ae:5a:
         35:93:27:a0:a6:50:fe:b5:74:2e:ac:59:b5:ce:16:99:dd:6d:
         25:c3:c6:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----