Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2bca86d0-4d38-302e-b9c2-0811bd8dfb0f.roa
File:                     2bca86d0-4d38-302e-b9c2-0811bd8dfb0f.roa (raw, json)
Hash identifier:          ArPYUJSiwaQrKtVFtX1CBqiF4IuhE5YLvMQD1FIJppk=
Subject key identifier:   AB:EC:97:19:97:ED:3D:0A:BF:52:A5:2A:9E:A9:49:53:FF:FD:38:A5
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583E5CFAE83CE0788598AB9681C0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2bca86d0-4d38-302e-b9c2-0811bd8dfb0f.roa
Signing time:             Sat 25 Jun 2022 12:00:00 +0000
ROA not before:           Sat 25 Jun 2022 12:00:00 +0000
ROA not after:            Mon 26 Jun 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:5c:fa:e8:3c:e0:78:85:98:ab:96:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jun 25 12:00:00 2022 GMT
            Not After : Jun 26 04:00:00 2023 GMT
        Subject: CN=29fbd92b-e04f-41ec-9cdf-e7cfc862144c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ec:61:f5:5b:89:e7:f2:eb:1a:cb:a8:e9:cc:
                    47:d2:4b:2c:ec:75:0d:3c:d3:c7:ca:ee:db:39:1d:
                    81:5a:9f:8e:51:68:3f:94:1e:2f:93:a7:36:b3:ef:
                    12:8d:6d:c6:2c:6c:a4:6e:ba:f2:be:bd:38:8b:a4:
                    a4:7f:97:64:66:b0:6f:2e:90:85:39:85:7e:1c:4c:
                    09:72:ab:4f:38:08:f2:2d:47:86:27:23:08:47:77:
                    9e:f7:c2:1e:be:a0:c3:3b:25:89:eb:9c:a2:57:84:
                    10:c8:33:85:ae:47:65:8a:08:f1:0c:76:b8:80:86:
                    c2:18:81:cb:83:fc:da:15:e5:b9:b1:11:28:44:55:
                    29:93:7f:af:3b:49:b4:c2:73:28:60:4a:ca:21:fc:
                    07:f9:74:c7:f8:c3:04:d5:97:5c:92:73:cd:7d:f6:
                    db:73:81:08:1b:ea:e4:88:62:13:06:11:64:32:e3:
                    4d:6c:80:45:2f:44:85:d3:1b:c6:ef:7a:9c:58:34:
                    c5:74:03:b9:68:2c:aa:34:16:80:20:f1:fa:34:d8:
                    0d:cf:2a:2d:0e:55:60:74:0d:6f:37:bd:6d:05:73:
                    71:ed:53:3c:63:6f:96:fd:6b:73:42:73:04:f3:4f:
                    13:8b:33:37:5d:d8:30:bf:29:46:2e:b3:c0:0c:b9:
                    c1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EC:97:19:97:ED:3D:0A:BF:52:A5:2A:9E:A9:49:53:FF:FD:38:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/2bca86d0-4d38-302e-b9c2-0811bd8dfb0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b7:78:62:86:1f:38:ec:56:fe:96:0c:bb:5d:83:2c:b6:d0:
         4d:03:dc:7e:b1:b0:b2:17:d3:67:f6:fe:97:ec:ef:db:16:6b:
         2f:be:b7:92:91:4d:db:68:92:b2:f0:c8:9d:83:5f:25:70:1c:
         9b:59:64:d7:c3:88:de:ab:9c:76:86:f3:ae:bd:22:f3:67:d0:
         26:34:ee:82:b7:b4:f5:aa:1c:7a:bd:02:e9:8d:05:04:7d:48:
         29:e3:85:94:d2:b5:62:ae:f2:52:c9:e0:5c:4d:08:c0:65:5d:
         a8:a8:97:fe:e4:67:f7:3b:31:37:f1:ce:b5:c3:b5:2c:98:f9:
         c1:eb:28:2e:55:8c:b8:34:68:43:88:5d:c7:03:ab:9c:02:6a:
         72:bc:2e:ac:11:8c:12:1d:b2:e2:ed:60:c4:3c:5c:cc:ef:9f:
         15:ac:81:4d:ef:e0:5c:7e:cd:04:aa:cd:4a:bb:fa:4c:cb:52:
         6f:e0:1c:06:77:9d:d0:91:92:1c:06:47:22:7f:5c:2b:f1:67:
         41:ce:d7:4c:de:dc:a3:31:3f:e6:fb:38:68:e1:e2:e2:7d:0f:
         d5:32:83:8c:4c:c4:35:9d:21:a0:c4:5d:fa:e4:6a:7b:df:68:
         aa:3b:f0:90:57:93:12:ce:2f:27:b8:51:4d:bf:df:42:e4:7c:
         26:b6:36:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----