Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/0/326130623a396534353a3a2f33322d3332203d3e203630323233.roa
File:                     326130623a396534353a3a2f33322d3332203d3e203630323233.roa (raw, json)
Hash identifier:          xP23ILuK68EC0OAxHf057ou8Y44/WyVG0R1Myri6DCk=
Subject key identifier:   A0:F8:0C:4B:A2:3A:93:90:62:E5:2A:FF:49:EA:5B:37:EA:7F:FB:E6
Certificate issuer:       /CN=7A7ECB46F513D542514E077E26624E43153E7F2C
Certificate serial:       314A4132960AF773F178E578AEE1AEEB39F687F1
Authority key identifier: 7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534353a3a2f33322d3332203d3e203630323233.roa
Signing time:             Fri 26 Jul 2024 14:32:41 +0000
ROA not before:           Fri 26 Jul 2024 14:27:41 +0000
ROA not after:            Fri 25 Jul 2025 14:32:41 +0000
asID:                     60223
IP address blocks:        2a0b:9e45::/32 maxlen: 32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4a:41:32:96:0a:f7:73:f1:78:e5:78:ae:e1:ae:eb:39:f6:87:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7ECB46F513D542514E077E26624E43153E7F2C
        Validity
            Not Before: Jul 26 14:27:41 2024 GMT
            Not After : Jul 25 14:32:41 2025 GMT
        Subject: CN=A0F80C4BA23A939062E52AFF49EA5B37EA7FFBE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:57:cb:04:de:20:54:2c:a7:c2:f1:fd:2e:43:
                    88:a1:ce:a2:28:5d:02:f6:a8:fc:57:90:84:c0:1c:
                    43:1e:ec:5a:75:44:6b:cb:d6:24:07:70:d2:61:14:
                    6f:dc:c0:3d:6e:8b:13:2f:2c:11:86:56:a4:78:dc:
                    58:4b:21:1c:4c:bc:60:67:ce:e7:43:8b:7c:bd:26:
                    6d:fe:67:ee:52:c8:3b:b3:b0:a7:ea:e9:5e:32:29:
                    3b:67:87:77:9a:46:7a:78:60:3a:e1:a4:78:41:ce:
                    5b:eb:9b:c3:59:30:5e:5a:b5:c6:41:e6:9c:26:26:
                    d3:bf:4b:57:ee:bc:f9:f0:17:e4:40:e8:67:56:13:
                    b5:7b:46:21:52:79:72:7d:ac:da:be:f2:c7:df:1e:
                    2c:70:eb:4b:28:0c:03:a6:e9:df:7a:6a:ec:5d:52:
                    36:d9:e2:32:2a:78:e5:f5:e8:b0:5b:f9:bb:35:ff:
                    28:37:fb:10:27:1b:32:1b:f8:c0:5f:16:f1:d8:a7:
                    06:11:6d:58:ec:c8:04:09:82:9e:1d:b3:ae:a3:27:
                    a2:9b:ad:55:52:83:ab:63:9c:a5:cf:ea:04:65:1c:
                    9c:ad:ce:ed:f1:87:b2:53:fb:95:36:e3:17:24:6d:
                    b2:d7:08:d3:fa:9c:16:06:f3:e0:02:8e:89:2f:42:
                    ec:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F8:0C:4B:A2:3A:93:90:62:E5:2A:FF:49:EA:5B:37:EA:7F:FB:E6
            X509v3 Authority Key Identifier:
                keyid:7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534353a3a2f33322d3332203d3e203630323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:9e45::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:cf:a0:51:c6:7c:33:ed:74:ca:39:e6:0d:1c:8a:b4:63:75:
         81:b6:6a:52:d1:f5:ba:72:d6:49:61:13:c5:ec:8e:58:52:c6:
         9a:e3:65:22:53:b9:66:de:c4:4b:e6:20:87:0f:a8:61:3c:07:
         55:d8:c2:f9:a5:29:92:54:82:80:49:45:0a:ed:5a:8d:1a:1c:
         24:4b:7d:01:80:c5:1e:5f:1f:aa:e0:5e:03:cd:0f:0e:4c:ba:
         0a:06:9f:f3:2b:ec:b8:67:17:c9:43:f5:53:44:2c:ab:e9:bf:
         fb:e2:f9:0c:9d:d6:20:28:af:ce:d9:10:30:33:90:f7:81:47:
         77:48:9f:4e:45:28:f1:0f:56:7f:6b:02:30:9e:de:51:ba:78:
         a1:f7:f6:f3:76:44:d5:cb:9c:68:24:f6:fb:2c:c3:95:27:a5:
         b4:c5:e3:ce:78:1d:94:c2:b3:d2:3e:c4:d5:56:9d:99:54:46:
         f7:07:bf:e9:7e:c1:8f:02:67:e8:46:f4:1e:e2:7a:6f:8c:05:
         8e:97:bc:1d:ba:dc:85:17:1b:60:8a:86:26:88:f3:a5:3c:d0:
         3d:d8:1d:15:30:9e:9b:2b:13:44:1a:5d:25:8f:d4:9c:b3:9d:
         7b:f9:f4:27:aa:93:78:a1:98:15:39:91:96:7f:1f:50:0f:35:
         df:55:2a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----