Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Infiniroute/0/326130623a396534373a3a2f33322d3332203d3e20323134393637.roa
File:                     326130623a396534373a3a2f33322d3332203d3e20323134393637.roa (raw, json)
Hash identifier:          k5t9q0ZoMD2DgxAaZtlXpirPhoeiaAzDBMxyPBxu8w0=
Subject key identifier:   ED:B2:77:19:83:F0:AC:19:CB:BA:C5:C5:72:4A:D5:25:12:E9:6C:3C
Certificate issuer:       /CN=7A7ECB46F513D542514E077E26624E43153E7F2C
Certificate serial:       6BFE46A32F66ED5687C312C228C314E19FB88219
Authority key identifier: 7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer
Subject info access:      rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534373a3a2f33322d3332203d3e20323134393637.roa
Signing time:             Fri 05 Jul 2024 15:30:46 +0000
ROA not before:           Fri 05 Jul 2024 15:25:46 +0000
ROA not after:            Fri 04 Jul 2025 15:30:46 +0000
asID:                     214967
IP address blocks:        2a0b:9e47::/32 maxlen: 32

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fe:46:a3:2f:66:ed:56:87:c3:12:c2:28:c3:14:e1:9f:b8:82:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7ECB46F513D542514E077E26624E43153E7F2C
        Validity
            Not Before: Jul  5 15:25:46 2024 GMT
            Not After : Jul  4 15:30:46 2025 GMT
        Subject: CN=EDB2771983F0AC19CBBAC5C5724AD52512E96C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:43:35:10:47:c1:5c:ca:40:9f:74:c6:a3:
                    e8:6e:16:0d:dc:fc:b8:db:ef:28:7c:34:36:80:86:
                    46:e2:33:a8:8f:b9:26:08:a3:c6:ee:7a:e8:f9:bc:
                    8c:82:22:f2:05:e7:20:7b:4d:61:2a:b0:6d:20:bb:
                    b5:1b:ca:2c:83:9a:a2:cd:57:02:5f:fc:ea:0e:c3:
                    55:db:67:6a:4b:22:aa:18:97:6f:7d:6c:71:21:9b:
                    05:de:9a:20:a8:08:a6:14:31:86:0a:bf:5d:b6:cc:
                    9e:ed:f0:92:be:ea:4c:03:ef:f0:88:47:a4:26:bb:
                    7b:c6:f5:1d:15:d8:6f:64:5b:4e:a4:50:cf:66:0c:
                    77:f4:87:66:b6:be:e4:40:b1:8d:5a:22:54:a9:fc:
                    a3:ae:d9:40:cb:bf:8a:cb:1e:7d:55:86:ed:5f:62:
                    1c:9f:cc:c0:f6:d8:dd:2a:e4:a5:4a:3c:65:13:54:
                    e7:c6:1f:06:42:ef:bd:d9:e8:67:79:87:69:43:d9:
                    69:78:27:60:93:ce:43:1f:67:e9:1c:d3:a6:59:64:
                    6e:f1:81:68:46:d2:fd:d5:18:1e:7b:d6:79:22:7a:
                    b3:9f:72:22:7f:f9:93:4b:c6:50:3a:d1:17:fd:f1:
                    60:8d:54:e2:39:89:09:9a:a4:93:62:73:95:35:59:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B2:77:19:83:F0:AC:19:CB:BA:C5:C5:72:4A:D5:25:12:E9:6C:3C
            X509v3 Authority Key Identifier:
                keyid:7A:7E:CB:46:F5:13:D5:42:51:4E:07:7E:26:62:4E:43:15:3E:7F:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Infiniroute/0/7A7ECB46F513D542514E077E26624E43153E7F2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7A7ECB46F513D542514E077E26624E43153E7F2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Infiniroute/0/326130623a396534373a3a2f33322d3332203d3e20323134393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:9e47::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:75:67:b7:40:f7:31:d8:e3:21:f6:ac:56:54:8e:df:4a:f6:
         09:d9:81:1e:d4:04:4b:f0:4d:d4:37:6e:22:e4:f6:5b:41:c8:
         79:1c:92:c6:96:47:b5:2b:f0:eb:2d:ae:46:1a:ec:28:9d:ed:
         66:f0:54:3a:96:d9:9d:21:1a:69:eb:55:f8:e9:55:8f:a5:08:
         5a:1b:29:c4:f0:f0:2a:b6:e4:c1:83:54:dc:f1:98:4f:8f:d7:
         cc:d2:06:ee:f2:6a:78:17:34:e9:b7:59:1e:96:03:6c:89:8d:
         fa:b6:84:66:69:cd:ee:13:02:ed:4e:23:79:de:e5:20:96:f2:
         2f:88:6e:f6:4c:67:ec:01:32:05:ef:a1:9e:ee:ed:b2:a2:da:
         a9:15:50:35:aa:96:fe:2d:7d:77:8d:78:99:b4:85:58:86:c7:
         2b:8b:59:47:3e:81:bb:c1:db:2b:1c:1f:7e:88:ea:e1:86:4c:
         98:4e:98:46:78:8c:66:e0:32:eb:84:84:4e:47:36:92:5f:37:
         e5:f9:a0:22:d2:5f:c2:34:0f:51:80:ce:7a:cb:ee:c0:78:8f:
         df:1d:f9:55:55:32:f1:5c:cc:84:1f:d3:15:8d:36:97:ad:3c:
         0b:73:ef:b1:8f:a8:4e:35:bb:1e:57:f3:30:b4:5d:e3:88:6a:
         e3:aa:25:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----