Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4a77ab54-0a5e-3a49-95b5-b6d9bc8fcb0a.roa
File:                     4a77ab54-0a5e-3a49-95b5-b6d9bc8fcb0a.roa (raw, json)
Hash identifier:          LXlGRTioQHRbOseEMkIwmUmHlcblk5yyz2TD5qGfo5s=
Subject key identifier:   6A:CC:1C:DA:C5:16:83:61:B0:43:EB:50:C4:D9:81:7F:88:83:30:67
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583DB7DC1F0A80FCA137D22F3580
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4a77ab54-0a5e-3a49-95b5-b6d9bc8fcb0a.roa
Signing time:             Wed 27 Apr 2022 12:00:00 +0000
ROA not before:           Wed 27 Apr 2022 12:00:00 +0000
ROA not after:            Fri 28 Apr 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b7:dc:1f:0a:80:fc:a1:37:d2:2f:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Apr 27 12:00:00 2022 GMT
            Not After : Apr 28 04:00:00 2023 GMT
        Subject: CN=e8442072-1593-452a-ad9c-a1b680cedc10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:a3:16:ba:e3:cc:27:96:48:d5:ae:4f:15:
                    0c:ae:57:07:8d:ec:e0:15:16:d8:10:42:c2:e3:f7:
                    35:87:23:0a:8d:b1:80:d2:6e:60:5e:01:56:b1:db:
                    74:ec:c3:09:93:bb:78:00:ca:de:19:04:1e:24:94:
                    88:a9:01:10:62:4f:4f:82:f8:65:26:05:6f:c3:dc:
                    a6:2f:77:d7:a4:5d:90:67:6b:e6:88:31:72:90:db:
                    f1:13:36:48:6f:be:31:1d:39:25:62:57:98:3d:c5:
                    a4:5e:43:b5:db:ba:de:84:80:46:ed:f6:f6:d0:3d:
                    b1:7b:f0:6d:bf:76:b9:8d:d3:d8:2c:d7:3a:04:a4:
                    8a:ef:7a:61:0d:53:e0:70:c3:22:09:9d:56:06:93:
                    cb:9f:e5:9b:31:26:4b:56:e7:b4:8e:8c:75:ce:f4:
                    6c:00:46:35:b1:c7:78:a1:74:2f:39:21:70:31:c1:
                    15:28:cb:b2:5b:40:62:e7:d3:bb:ef:5d:bb:44:45:
                    84:58:47:83:c0:43:86:15:21:a4:9f:19:59:6b:a9:
                    f4:3d:2e:b3:56:f4:b7:05:1b:05:ef:19:54:c3:4c:
                    57:63:42:71:a3:68:54:50:08:5b:a6:41:ab:4d:5e:
                    0b:1e:3b:14:b9:3b:f2:de:d9:9f:77:d1:50:20:78:
                    8d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CC:1C:DA:C5:16:83:61:B0:43:EB:50:C4:D9:81:7F:88:83:30:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/4a77ab54-0a5e-3a49-95b5-b6d9bc8fcb0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:3f:4a:f2:93:96:b7:0f:08:5b:a1:09:93:e0:88:b8:6e:1f:
         ff:5e:e9:76:4e:d4:51:fd:75:74:cb:14:bc:b9:e7:8e:4d:57:
         16:dd:9c:eb:56:89:ac:96:ca:1c:f0:20:a8:07:b6:6e:84:15:
         27:67:8a:af:b7:97:7a:9a:42:f0:0c:58:3e:d4:55:9b:92:fc:
         6b:5d:64:d3:c4:a6:2b:95:d3:ef:0a:2b:f3:53:a0:dd:27:2c:
         0d:77:c3:53:da:af:10:3e:47:5c:19:c3:85:41:eb:e4:90:4d:
         b9:6f:cc:bd:b7:81:dd:b8:f5:e2:b0:e1:d4:99:6a:4b:51:6c:
         e2:c4:e0:07:8f:95:ef:ee:56:d8:39:b2:7c:fb:6a:88:84:d3:
         b9:4e:71:08:cd:56:99:0e:a3:65:1b:57:c2:32:75:57:10:2e:
         28:f7:ed:60:b6:67:1f:84:c7:79:7d:1c:2d:2f:01:c0:fe:74:
         55:e7:54:1b:95:3f:bc:a3:7e:9b:42:f2:16:e9:6e:77:81:a6:
         bf:44:be:92:f3:d6:f8:e1:74:4b:4b:4f:22:ae:0d:ea:40:da:
         1f:20:f0:b6:6f:a8:de:ad:a3:7d:3d:c7:3e:6e:6f:f9:3f:fe:
         c3:e2:bc:32:d6:c0:f8:e0:d2:dd:75:b1:b4:94:67:a9:22:32:
         e5:70:6b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----