Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/ed17f1ac-9fe7-3a8a-9cf9-a0e2ae7e6ca2.roa
File:                     ed17f1ac-9fe7-3a8a-9cf9-a0e2ae7e6ca2.roa (raw, json)
Hash identifier:          k/b1SoNea2nJt/nAClanGNog21R/l6FaNadCVT1il3k=
Subject key identifier:   45:6D:2F:54:D6:98:72:1B:EF:54:93:68:11:52:15:EC:4F:48:DA:67
Certificate issuer:       /CN=53f3af06-68ea-4591-9526-0c1fce331651
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E22DC18E0
Authority key identifier: 8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/ed17f1ac-9fe7-3a8a-9cf9-a0e2ae7e6ca2.roa
Signing time:             Thu 31 Oct 2019 17:27:59 +0000
ROA not before:           Mon 11 Jul 2016 04:00:00 +0000
ROA not after:            Sat 11 Jul 2026 04:00:00 +0000
asID:                     395611
IP address blocks:        2620:19:4000::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:22:dc:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3af06-68ea-4591-9526-0c1fce331651
        Validity
            Not Before: Jul 11 04:00:00 2016 GMT
            Not After : Jul 11 04:00:00 2026 GMT
        Subject: CN=a36262ed-e6df-4834-b7c7-7ce96d12d710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:17:69:0a:24:9e:62:fb:8e:76:eb:44:13:a1:
                    63:f4:43:0c:63:cc:82:0d:38:76:ae:d4:b0:d7:2d:
                    0d:d6:8c:de:b7:28:69:61:a9:07:d7:8b:03:e2:37:
                    30:16:dd:25:c3:72:3b:bc:73:fe:b6:8b:95:e3:63:
                    b2:94:58:f9:70:5e:16:0f:78:d8:42:69:29:da:82:
                    e4:42:d2:be:41:ff:a2:bf:36:93:69:2e:2c:e6:49:
                    f5:87:e0:a1:1c:d7:14:05:41:ea:4d:5c:d0:97:ba:
                    b4:f6:86:16:ad:c0:26:69:a8:3d:8f:ae:1f:16:ef:
                    54:fe:0a:61:96:f3:1e:8d:34:c1:cc:5d:50:a8:42:
                    ce:cb:db:9e:64:42:31:88:7f:9a:9e:8a:a7:66:ac:
                    6c:f3:f2:51:fa:8e:e8:99:17:fd:58:97:c7:73:b4:
                    ad:c2:85:63:02:2e:68:d6:03:dc:7e:40:0b:6a:ee:
                    8f:2d:b3:2d:47:20:e8:c0:52:7b:da:b0:7c:3b:96:
                    77:fd:8b:56:ad:e7:d1:1c:b0:c6:9d:91:87:b6:89:
                    26:86:e9:ee:98:0a:75:3c:80:22:7c:f6:ff:0c:40:
                    c3:73:f8:57:55:3e:e3:4a:23:8b:69:38:32:0d:83:
                    8e:ed:91:17:05:2d:9c:a3:51:14:e3:ab:01:30:37:
                    47:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6D:2F:54:D6:98:72:1B:EF:54:93:68:11:52:15:EC:4F:48:DA:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/ed17f1ac-9fe7-3a8a-9cf9-a0e2ae7e6ca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651/53f3af06-68ea-4591-9526-0c1fce331651.crl

            X509v3 Authority Key Identifier:
                keyid:8A:FE:A7:10:44:F5:A9:14:8D:C7:0F:AC:74:09:68:60:5F:0D:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/53f3af06-68ea-4591-9526-0c1fce331651.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:19:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:b8:bf:85:52:b1:b9:29:de:89:3f:bf:4e:94:d9:b6:95:72:
         fa:19:c3:8b:be:de:40:45:49:1d:3b:75:47:e7:37:ff:20:08:
         b2:1e:84:91:48:18:22:55:38:1d:1a:4e:31:42:0e:7d:5d:88:
         57:0b:1d:53:aa:98:fe:25:cb:41:61:1a:37:b7:54:ad:fe:3d:
         98:38:86:bd:67:97:4d:c9:68:9d:4f:70:4f:38:27:bb:ff:a5:
         0c:31:a7:34:2a:50:14:fc:76:fd:1c:35:03:ec:aa:b8:55:c8:
         14:30:84:d9:1e:84:db:39:0e:3c:1a:bd:5e:49:c4:97:2b:04:
         b9:e1:03:6e:23:69:f8:b0:a9:92:01:8d:6c:33:fa:f1:b7:6f:
         f5:b7:39:9a:1f:ef:1c:ba:d8:4c:69:e7:1a:fe:25:31:72:3a:
         4f:bc:29:e3:67:07:fd:56:27:a3:f4:e0:a6:41:6e:dd:f4:df:
         1b:fd:a5:1d:d8:69:88:bc:69:7b:7b:82:c6:cf:f6:e5:af:b4:
         70:cf:10:4c:6a:6c:8a:18:00:b6:8a:39:44:b4:25:ef:34:14:
         08:b6:f8:bc:48:88:18:0f:21:54:d7:d5:f1:b4:b4:97:ae:50:
         2c:63:d6:b7:53:44:0d:06:c1:42:f9:90:d8:95:81:91:1c:d9:
         b7:93:00:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----