Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1854cae3-e32f-32ba-ac8a-dfecdcd34458.roa
File:                     1854cae3-e32f-32ba-ac8a-dfecdcd34458.roa (raw, json)
Hash identifier:          eGLcU+6lxUKrOc5u6Lm3w3rxFM82bwLvLsNp8kwU7eo=
Subject key identifier:   0E:FA:77:7F:54:77:38:C1:FA:74:D7:92:06:1E:59:50:B2:C6:94:9E
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583D45B15C1858380B2AA5E59208
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1854cae3-e32f-32ba-ac8a-dfecdcd34458.roa
Signing time:             Fri 18 Mar 2022 04:00:00 +0000
ROA not before:           Fri 18 Mar 2022 04:00:00 +0000
ROA not after:            Sat 18 Mar 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:45:b1:5c:18:58:38:0b:2a:a5:e5:92:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Mar 18 04:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2023 GMT
        Subject: CN=2aab9938-dc03-4594-8f89-ea7e46c66e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:7b:fd:d8:f0:9a:ae:3e:ba:21:fe:4f:e4:
                    7f:05:69:aa:46:63:8b:7a:65:92:0b:e6:3b:b6:4c:
                    ac:9a:db:59:34:11:63:c9:19:82:68:cf:9a:51:53:
                    7b:42:45:11:9d:a3:65:89:42:07:78:26:79:0b:6a:
                    9a:3f:a8:59:2b:d0:d3:70:9d:9f:14:2f:16:45:84:
                    e8:89:9d:a4:e1:74:56:93:68:35:7a:c3:3a:66:27:
                    3d:3b:a8:e5:cf:dd:a9:a2:64:33:58:dd:32:91:f6:
                    23:10:d3:9e:04:48:49:04:78:e2:b2:a3:fc:19:57:
                    c4:6a:c5:4b:ae:2c:a2:91:26:bd:62:76:41:f6:00:
                    a9:9d:d7:41:b6:52:0f:99:69:6a:45:df:41:a7:49:
                    e9:25:df:85:54:f9:98:55:d0:bb:a5:30:33:2f:ab:
                    ff:9b:b4:86:90:ac:73:6a:0f:a6:06:33:3f:5e:b5:
                    31:62:ad:9e:5b:b2:b1:1c:00:43:67:b9:4f:1b:ee:
                    2a:d1:1c:78:ad:63:3e:ae:f3:47:1b:26:a7:28:cd:
                    7b:49:8d:d1:94:c8:82:7c:21:ed:b1:90:67:39:ef:
                    d3:cd:6f:e9:c7:cf:27:ab:c6:a3:71:36:26:3d:3a:
                    16:48:46:8f:82:11:c2:26:46:56:dd:51:e7:f5:5e:
                    6a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FA:77:7F:54:77:38:C1:FA:74:D7:92:06:1E:59:50:B2:C6:94:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/1854cae3-e32f-32ba-ac8a-dfecdcd34458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:24:c7:9f:95:d5:2c:60:37:6a:c4:a3:bc:a4:0f:81:ee:c2:
         f8:f2:5a:66:93:7e:3f:79:08:41:3a:9f:da:ed:b0:a2:22:94:
         ed:50:51:6e:ee:80:8d:34:a9:f9:d1:f4:8c:3b:cc:1f:86:b9:
         41:7b:06:5b:ba:93:f5:1d:d5:7c:ce:3d:98:84:7f:d2:7e:8d:
         d7:36:a6:65:a1:79:ae:23:ef:2c:2d:51:0e:2b:9d:6f:e1:6b:
         d3:ad:cd:db:54:e2:e9:cf:a3:a5:3d:70:e9:b9:1a:bc:88:49:
         fd:d9:69:8e:9f:0d:82:09:d0:17:fd:94:7c:08:b0:01:69:a3:
         71:c7:2d:b1:a8:d1:4a:38:19:45:4e:72:bf:69:e9:45:83:34:
         dc:0d:1e:99:38:91:25:ea:f7:3e:41:c0:f6:10:6a:a1:1c:8d:
         50:36:da:f0:42:46:52:ff:3e:f9:c4:3f:2a:27:c4:22:24:ab:
         9e:97:98:ce:fd:da:1a:ba:51:86:04:10:5b:b6:16:07:e1:59:
         6f:71:45:9a:9b:8c:8d:31:ee:d7:c8:05:ad:73:2d:c2:4d:66:
         2a:e8:b4:48:1d:e9:9a:94:53:44:9f:2e:f7:74:39:8a:d8:87:
         1a:3e:71:58:4a:fc:00:16:72:f1:fd:40:7c:08:8f:86:e0:76:
         25:5b:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----