Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/07c32330-caf4-3123-b257-dca889501a7f.roa
File:                     07c32330-caf4-3123-b257-dca889501a7f.roa (raw, json)
Hash identifier:          /PjPYEashbRfa0Qwv64J8E1F7qrWnYXqRdN337SbugU=
Subject key identifier:   D1:41:0A:24:2B:88:87:EF:26:71:09:D7:A7:76:B7:06:F5:51:FA:B7
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583DE4FBDE1156EA73D554177600
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/07c32330-caf4-3123-b257-dca889501a7f.roa
Signing time:             Fri 13 May 2022 12:00:00 +0000
ROA not before:           Fri 13 May 2022 12:00:00 +0000
ROA not after:            Sun 14 May 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:e4:fb:de:11:56:ea:73:d5:54:17:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: May 13 12:00:00 2022 GMT
            Not After : May 14 04:00:00 2023 GMT
        Subject: CN=59ac0573-2b61-4149-b12d-1f9df989f230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c0:ee:9c:d7:03:c0:bb:11:e7:38:6c:b2:3c:
                    13:24:56:43:ec:1a:c8:31:75:23:68:d5:6c:c5:d5:
                    57:37:9e:a4:c4:6a:1c:af:13:75:f6:66:5e:cd:09:
                    a9:ed:72:9e:18:bb:ea:9b:6f:39:e1:47:e4:fe:0f:
                    f5:21:73:6f:34:bf:51:dc:74:f5:c8:9d:e8:44:9a:
                    e2:14:06:c7:8e:39:c4:ef:36:25:82:5d:ab:a2:14:
                    d3:47:90:40:33:9f:93:2f:17:72:a1:cc:e8:79:2e:
                    0e:e5:db:d6:c2:c9:02:19:0f:bd:5c:bd:bb:36:b1:
                    5e:a1:ca:56:e7:66:c7:33:d3:1c:b9:e7:cd:9f:15:
                    9d:30:2e:01:57:13:1d:66:f9:ae:8e:37:52:33:3e:
                    e2:da:6c:41:94:56:d9:44:cc:48:5c:58:41:2c:16:
                    29:3e:3e:b0:e7:19:b5:dd:32:f0:5f:8c:af:03:ab:
                    8f:e8:78:00:69:09:75:0d:e6:ab:82:15:ac:b8:c7:
                    29:c7:7c:a6:10:31:b4:32:47:df:31:45:30:a2:65:
                    23:f2:23:09:c7:22:c9:b4:2e:70:22:80:2e:02:7b:
                    ac:06:d0:2f:60:3b:53:47:8a:46:df:b0:81:a9:bb:
                    9a:43:68:4c:c8:82:24:24:a0:c2:85:4d:85:1f:eb:
                    89:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:41:0A:24:2B:88:87:EF:26:71:09:D7:A7:76:B7:06:F5:51:FA:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/07c32330-caf4-3123-b257-dca889501a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ae:11:75:fc:31:d2:ae:6a:ac:b0:8f:42:e4:ea:c8:98:c2:
         28:48:af:8d:73:ba:17:e0:33:80:df:ff:c6:e3:6e:d7:dd:48:
         aa:98:ee:7e:fa:e3:09:0c:d7:5a:3c:e8:37:c6:44:85:79:45:
         6c:6a:df:e9:cf:5b:68:8b:45:ea:14:84:f4:47:9a:4d:d4:fa:
         5d:6f:89:c1:b7:5b:f8:0b:33:6b:61:2f:e6:88:f6:bd:3b:25:
         28:84:53:12:ca:42:1b:36:9b:be:78:5a:e2:32:2f:13:03:c9:
         36:53:e6:a0:04:3e:e5:f6:f9:33:1e:2d:a2:5f:93:44:dd:6e:
         9b:ec:5b:65:d4:43:9a:a7:0c:5c:0c:64:cf:e5:58:ea:d6:d6:
         0d:89:fb:cd:ca:51:87:94:19:7f:c8:12:18:87:4c:3c:b1:c8:
         71:eb:87:d6:f4:f4:d8:bc:03:6b:ba:c8:08:d2:8a:1f:68:33:
         35:bb:d3:01:95:d8:82:b3:db:ff:5c:05:4f:1d:81:03:de:f2:
         dd:98:b6:e2:71:08:c0:b4:91:94:4e:84:f7:29:e4:b4:0d:62:
         ad:15:a9:ac:29:27:8b:db:9a:5e:8e:9f:f9:63:b5:6b:0e:f6:
         a5:32:76:03:c0:ac:41:e1:cf:02:ac:e2:5a:fd:a7:ff:e0:ed:
         5f:0f:1c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----