Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/05fb9830-55e2-30ca-b891-0be11b7c819b.roa
File:                     05fb9830-55e2-30ca-b891-0be11b7c819b.roa (raw, json)
Hash identifier:          rqtYLYnvycau5YSRrVZ1Hcnc5WP3sPLJtnluyspIYCQ=
Subject key identifier:   37:ED:A3:27:69:5B:22:65:47:75:D5:DD:15:85:FB:33:03:4D:F0:1C
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583E0F0F39B63CBE7DCD2AE38A00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/05fb9830-55e2-30ca-b891-0be11b7c819b.roa
Signing time:             Sat 28 May 2022 12:00:00 +0000
ROA not before:           Sat 28 May 2022 12:00:00 +0000
ROA not after:            Mon 29 May 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:0f:0f:39:b6:3c:be:7d:cd:2a:e3:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: May 28 12:00:00 2022 GMT
            Not After : May 29 04:00:00 2023 GMT
        Subject: CN=a45c4fa6-bdc5-4f2f-90aa-e31410130520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c2:cc:12:b3:3b:ea:5c:da:ae:e7:4d:c1:c6:
                    66:f6:34:b9:69:8d:62:df:aa:4d:aa:bb:a5:34:d2:
                    cd:4a:d1:38:cc:89:7f:80:bc:b1:cf:98:5f:d3:2e:
                    c3:dd:3b:8c:29:77:14:78:1b:10:10:9f:5f:c9:23:
                    f7:66:da:99:bd:f9:6e:29:8a:15:2e:04:71:d0:f7:
                    bf:37:b3:d0:22:92:35:ef:d9:5d:84:8f:1f:52:ea:
                    fc:9d:27:c4:fc:6d:66:e2:1b:b6:ab:ac:12:bc:08:
                    ed:e3:c1:19:e5:85:0d:27:03:8d:bf:2c:b4:46:b7:
                    1b:57:5e:dc:ed:b4:31:c5:02:2d:ae:96:a0:8e:3e:
                    5b:2d:04:0d:c8:dc:50:ae:c2:be:97:90:6b:10:16:
                    d7:2e:53:8f:53:2e:e9:82:5a:e8:75:9e:47:98:f6:
                    68:45:fe:b4:85:41:9c:5a:b2:7e:dc:02:4d:42:6d:
                    8f:cc:ca:ce:56:f7:70:b4:60:c6:6f:81:06:d6:d7:
                    a8:eb:4c:01:21:f3:f1:a4:4e:cb:06:f7:20:a0:8e:
                    aa:a0:28:0a:61:58:4e:3a:af:ff:13:ea:a3:9e:60:
                    ae:a6:7f:95:82:c2:14:fd:85:42:a1:75:8b:d4:3c:
                    21:d8:69:66:fc:93:61:fd:0b:ab:c3:01:ec:b7:8e:
                    8f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:ED:A3:27:69:5B:22:65:47:75:D5:DD:15:85:FB:33:03:4D:F0:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/05fb9830-55e2-30ca-b891-0be11b7c819b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f2:7f:55:3d:62:e0:f1:8a:30:6a:47:e2:42:26:35:6e:89:
         8a:d3:ad:61:da:65:0f:87:37:0b:e8:4c:93:44:06:64:7c:b6:
         06:fb:8e:53:b3:94:b6:75:4e:9d:88:e5:3c:77:07:c7:74:7d:
         b9:1b:ef:c4:e6:74:4f:77:8e:0a:a4:74:66:38:9f:6d:dd:fd:
         57:5b:a3:bb:e5:68:6f:74:83:54:b8:60:58:5c:22:c3:94:11:
         2f:c6:95:c9:2f:e0:6f:9a:26:7f:c9:c2:11:91:1d:7b:2d:6a:
         34:09:a5:cd:de:26:bc:e0:df:e2:3e:d9:a9:b6:2c:ec:e8:c4:
         b0:b2:16:22:11:d3:00:fa:af:bb:73:69:02:46:6f:cd:40:81:
         25:6b:ca:66:84:47:8d:90:89:5b:b7:20:69:9d:83:09:89:8e:
         19:29:83:a1:73:e7:79:ff:1f:20:dc:45:87:22:d6:6e:89:8a:
         5c:11:64:53:3a:87:80:9c:c4:91:88:4e:18:50:df:43:8e:01:
         b9:49:4a:dc:b1:e9:20:05:98:d8:1f:29:e8:15:b6:2d:2c:16:
         51:dc:35:e8:44:b6:db:33:b6:e1:a3:32:f9:37:44:a5:e6:87:
         db:67:00:da:98:95:d4:0c:7b:b6:09:19:08:d4:ac:ba:0d:1c:
         0f:4a:70:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:06 2024 by rpki-client on console-fra.rpki-client.org