Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/592c7cb3-c5bd-308a-b304-9c6c701853f6.roa
File:                     592c7cb3-c5bd-308a-b304-9c6c701853f6.roa (raw, json)
Hash identifier:          wU2PP26dgkbl5ewHlxNyfJjrKPLTCCl9owu8Oz3RSdM=
Subject key identifier:   01:2A:33:35:9E:08:29:CB:07:00:7A:49:11:28:67:0B:1D:79:91:A4
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583F4CB0B1546D00E068FA288380
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/592c7cb3-c5bd-308a-b304-9c6c701853f6.roa
Signing time:             Mon 19 Sep 2022 12:00:00 +0000
ROA not before:           Mon 19 Sep 2022 12:00:00 +0000
ROA not after:            Wed 20 Sep 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4c:b0:b1:54:6d:00:e0:68:fa:28:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Sep 19 12:00:00 2022 GMT
            Not After : Sep 20 04:00:00 2023 GMT
        Subject: CN=40508153-c151-433a-888b-74f40729d3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:30:74:ae:2c:9b:bc:c5:63:8e:8a:05:a0:
                    0c:92:e0:00:0e:79:3e:e3:c8:b1:9a:c1:5a:13:63:
                    ec:2d:88:33:4f:62:cf:83:61:11:3e:7d:e4:2b:f9:
                    06:7e:05:26:34:9d:65:36:3f:98:bd:25:e0:09:9c:
                    f7:35:f6:91:89:b4:c0:78:2c:a5:44:4f:c5:cc:ee:
                    4a:84:76:33:2c:e4:3a:b8:4b:fb:25:f7:b4:c9:13:
                    c8:61:fc:87:1b:11:5c:f1:6a:85:cb:57:c2:fb:b8:
                    6d:96:87:6e:fd:07:2e:ba:88:8f:a2:b4:36:c5:52:
                    a2:60:b5:f3:b0:51:c2:f8:e2:a7:85:3b:0c:0c:a4:
                    16:b9:77:52:81:51:e3:1d:ec:3e:e8:1e:49:75:82:
                    70:f6:b3:60:c4:24:6f:73:04:fb:2b:9f:59:4b:85:
                    2a:20:66:b2:6e:34:2c:9c:e3:1a:84:00:5f:45:02:
                    17:e6:60:4d:30:c2:42:88:83:74:2e:8f:0e:46:3a:
                    29:75:99:37:7a:bc:2d:89:b3:32:89:17:5d:9e:46:
                    59:d2:28:82:0f:cc:6c:2c:5a:7a:1d:44:05:fb:d6:
                    da:64:ff:e5:27:5b:20:aa:18:99:a9:0b:8c:49:2d:
                    c6:2d:32:21:36:55:fb:0b:96:98:55:43:4c:62:e7:
                    d6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2A:33:35:9E:08:29:CB:07:00:7A:49:11:28:67:0B:1D:79:91:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/592c7cb3-c5bd-308a-b304-9c6c701853f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:87:fa:f1:b6:20:fa:24:12:0b:df:8e:73:1a:7d:33:95:f0:
         28:e6:50:3f:46:1b:1d:54:d9:44:4d:85:4a:b1:63:19:79:25:
         12:0c:54:f6:22:a5:8e:02:cf:b0:30:c4:47:60:33:1f:a7:8a:
         f0:7b:ed:ef:31:3e:e6:95:90:ca:17:e3:65:d6:08:a1:7d:c3:
         3a:46:26:8b:48:b3:49:90:7d:05:f1:92:db:c3:cd:68:2c:99:
         fb:ed:5d:2b:96:29:21:1c:a6:91:3c:1a:51:8b:51:c7:6b:07:
         3a:ed:aa:42:11:2d:77:4f:a7:98:39:b1:2f:0a:61:e8:af:45:
         ee:a8:7e:00:8a:a0:b9:7c:42:06:54:d6:d5:24:07:61:ea:f9:
         f4:98:c0:06:d6:1e:5c:14:b2:b9:b1:45:79:0a:75:9c:3e:01:
         41:2f:60:a1:13:5c:bb:1a:fa:b3:a7:0a:2b:67:65:8e:c0:2e:
         2d:c7:65:ad:02:21:b2:4e:35:90:d8:c9:ad:29:23:48:3b:32:
         1b:25:38:59:17:4e:4e:1e:b9:64:e7:60:72:0e:1e:a0:2e:17:
         4a:b0:ec:81:82:b7:0b:2c:51:1e:10:69:55:70:d0:73:7a:f0:
         74:89:42:89:8c:f4:fe:1f:7b:5a:12:2a:7b:9b:09:ef:7f:f0:
         c8:25:42:a7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD9MsLFUbQDgaPoog4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDkxOTEyMDAwMFoXDTIzMDkyMDA0MDAwMFowLzEtMCsGA1UEAxMk
NDA1MDgxNTMtYzE1MS00MzNhLTg4OGItNzRmNDA3MjlkM2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S4wdK4sm7zFY46KBaAMkuAADnk+48ixmsFa
E2PsLYgzT2LPg2ERPn3kK/kGfgUmNJ1lNj+YvSXgCZz3NfaRibTAeCylRE/FzO5K
hHYzLOQ6uEv7Jfe0yRPIYfyHGxFc8WqFy1fC+7htlodu/QcuuoiPorQ2xVKiYLXz
sFHC+OKnhTsMDKQWuXdSgVHjHew+6B5JdYJw9rNgxCRvcwT7K59ZS4UqIGaybjQs
nOMahABfRQIX5mBNMMJCiIN0Lo8ORjopdZk3erwtibMyiRddnkZZ0iiCD8xsLFp6
HUQF+9baZP/lJ1sgqhiZqQuMSS3GLTIhNlX7C5aYVUNMYufWWQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAEqMzWeCCnLBwB6SREoZwsdeZGkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvNTkyYzdjYjMtYzViZC0z
MDhhLWIzMDQtOWM2YzcwMTg1M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAuH+vG2IPokEgvfjnMafTOV8CjmUD9GGx1U2URNhUqxYxl5JRIM
VPYipY4Cz7AwxEdgMx+nivB77e8xPuaVkMoX42XWCKF9wzpGJotIs0mQfQXxktvD
zWgsmfvtXSuWKSEcppE8GlGLUcdrBzrtqkIRLXdPp5g5sS8KYeivRe6ofgCKoLl8
QgZU1tUkB2Hq+fSYwAbWHlwUsrmxRXkKdZw+AUEvYKETXLsa+rOnCitnZY7ALi3H
Za0CIbJONZDYya0pI0g7MhslOFkXTk4euWTnYHIOHqAuF0qw7IGCtwssUR4QaVVw
0HN68HSJQomM9P4fe1oSKnubCe9/8MglQqc=
-----END CERTIFICATE-----