Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/0/326130623a396534323a3a2f33322d3438203d3e20323135353331.roa
File:                     326130623a396534323a3a2f33322d3438203d3e20323135353331.roa (raw, json)
Hash identifier:          sXY76fauSsJeReqnCLg9nZkFiAlk2ISt7Kl+yHqhplE=
Subject key identifier:   08:71:61:61:01:A2:EF:C4:55:ED:71:5A:F1:D6:50:5E:A4:75:C5:0E
Certificate issuer:       /CN=7A7ECB46F513D542514E077E26624E43153E7F2C
Certificate serial:       5FDC6B74D5A5A7F29AB7F09AEB73C335CC7D3195
Authority key identifier: 7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534323a3a2f33322d3438203d3e20323135353331.roa
Signing time:             Tue 28 May 2024 15:07:32 +0000
ROA not before:           Tue 28 May 2024 15:02:32 +0000
ROA not after:            Tue 27 May 2025 15:07:32 +0000
asID:                     215531
IP address blocks:        2a0b:9e42::/32 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:dc:6b:74:d5:a5:a7:f2:9a:b7:f0:9a:eb:73:c3:35:cc:7d:31:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7ECB46F513D542514E077E26624E43153E7F2C
        Validity
            Not Before: May 28 15:02:32 2024 GMT
            Not After : May 27 15:07:32 2025 GMT
        Subject: CN=0871616101A2EFC455ED715AF1D6505EA475C50E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e8:a4:23:23:06:27:27:dc:33:1c:3c:af:41:
                    6b:4c:e3:90:e1:fa:f8:d8:e4:ed:fb:a3:5e:68:78:
                    c8:7c:61:67:1d:c4:06:70:90:07:d2:30:2f:53:02:
                    cf:4b:a9:ad:01:f0:70:8b:54:3f:05:68:28:1e:5d:
                    ef:50:db:1c:c6:57:fb:9d:24:9f:d9:8d:8e:d5:8f:
                    c6:66:b6:c0:91:31:14:0b:ab:42:9f:98:08:25:7a:
                    d3:85:c2:2e:51:85:00:70:68:bd:72:2f:94:73:86:
                    7b:17:8f:63:7c:12:c7:51:6b:16:fd:22:dd:86:ce:
                    bc:79:ee:6a:aa:ef:25:86:b9:1c:3e:88:33:53:3e:
                    19:7a:ac:23:4d:bc:28:3d:c2:8c:bb:c7:2e:25:98:
                    3a:71:30:69:13:55:d4:26:81:3b:21:bd:f0:92:a0:
                    32:c8:e8:1f:39:49:57:ec:e3:79:ba:06:40:dc:61:
                    da:ed:09:8e:d1:fa:93:3d:ce:97:5a:e9:94:f4:e4:
                    ff:2f:8b:8f:6a:6b:b9:4a:4f:b1:c2:49:8c:46:87:
                    9b:5d:67:b5:aa:33:cd:88:70:7f:b9:7c:da:e9:90:
                    f2:f5:74:ce:4f:29:47:ad:33:aa:ed:83:96:79:51:
                    e0:29:a9:63:17:df:7e:eb:6b:b7:ca:01:25:d5:1f:
                    b5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:71:61:61:01:A2:EF:C4:55:ED:71:5A:F1:D6:50:5E:A4:75:C5:0E
            X509v3 Authority Key Identifier:
                keyid:7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534323a3a2f33322d3438203d3e20323135353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:9e42::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:e7:9c:49:4a:30:87:16:03:92:26:5d:00:24:2f:a7:0d:a4:
         cf:20:b5:a2:58:50:a9:48:9a:89:28:7b:86:05:3a:f7:73:65:
         d1:a1:f4:e7:62:0f:b1:b4:3b:26:44:76:13:b7:85:ae:58:d6:
         5b:53:13:62:d0:2b:08:ef:bb:e3:15:e1:b6:84:9d:55:fe:8d:
         df:b3:12:df:ce:1a:63:6d:5b:dc:da:a9:af:0b:9d:59:3e:cb:
         55:9d:4c:bb:67:5e:62:49:0c:78:a2:07:5a:70:2b:81:69:f7:
         1a:b7:42:71:7d:a7:2c:83:fb:7a:5c:7b:57:74:77:99:50:ee:
         ac:70:04:c2:b4:5c:1b:22:df:6f:19:a8:2b:4d:ed:3b:60:7e:
         f6:3a:02:1a:cd:71:dd:0d:fa:45:7a:4a:29:86:fc:34:25:77:
         71:83:ae:8c:bc:47:4d:b4:37:68:31:67:02:3a:9b:5b:4a:64:
         48:29:2b:58:a1:4e:af:ae:61:38:ee:17:64:80:ad:35:da:8d:
         96:51:11:d6:22:e8:95:8e:cb:f9:2c:fb:02:47:46:e7:73:fb:
         89:34:03:cb:17:ce:f3:d4:83:7a:84:92:65:33:cc:f3:51:84:
         8c:82:e1:c8:00:01:6a:c3:47:ea:5b:3f:11:b0:40:ea:d7:b8:
         bf:90:ed:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----