Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5ddd70f4-bc84-3549-984b-36450174ee46.roa
File:                     5ddd70f4-bc84-3549-984b-36450174ee46.roa (raw, json)
Hash identifier:          0sc1NbqEFKjZY7ifA7qfHDA9B6xCiKRTyxeQf8cXjNk=
Subject key identifier:   54:C2:89:1B:6E:0C:57:DC:11:21:0A:4B:F5:48:D6:1A:FE:50:DA:7F
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583CE17E6E6524D8C05D7E6247C0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5ddd70f4-bc84-3549-984b-36450174ee46.roa
Signing time:             Thu 10 Feb 2022 05:00:00 +0000
ROA not before:           Thu 10 Feb 2022 05:00:00 +0000
ROA not after:            Fri 10 Feb 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e1:7e:6e:65:24:d8:c0:5d:7e:62:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Feb 10 05:00:00 2022 GMT
            Not After : Feb 10 05:00:00 2023 GMT
        Subject: CN=30897b6f-55ad-49d2-844e-edd2d3b03eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:85:a0:d4:54:1f:68:cc:a6:e9:0b:a6:ed:4f:
                    d4:9f:f1:73:77:40:ad:23:3a:aa:e8:18:c8:fd:6b:
                    80:cf:c3:47:7a:c1:53:7a:35:85:3a:7a:e6:fe:4b:
                    c3:7f:df:72:66:27:09:3c:d3:4a:68:cf:fe:9d:c3:
                    62:1c:76:69:9e:2a:fb:6c:8d:e2:1c:71:c0:47:69:
                    89:91:92:32:70:5a:04:b1:d1:0c:03:c0:d2:f6:07:
                    46:a5:16:d1:0f:21:ae:fe:42:85:76:b1:fc:29:00:
                    99:23:95:76:80:51:c4:a6:68:7b:b9:f0:5b:76:68:
                    7e:32:e5:41:9e:99:4f:5a:8b:f5:79:c0:49:d8:a8:
                    64:80:ad:2b:28:a0:4c:b7:8f:66:18:05:9e:6f:9f:
                    90:d7:14:a4:dc:db:05:22:fe:45:59:38:81:07:d9:
                    b6:84:bd:b4:aa:99:09:0a:fc:bd:68:bb:01:a4:48:
                    b3:ec:f6:6f:6b:33:d9:03:f5:0a:64:99:88:34:f5:
                    fe:68:a6:cb:84:a0:7f:8b:55:17:60:32:5d:f6:d7:
                    ee:24:e3:11:f9:f5:d5:99:d1:45:47:2b:54:a7:5d:
                    07:03:5e:74:6c:fb:44:bb:58:0d:5a:07:38:d6:e6:
                    53:37:4c:54:ec:39:47:8d:e4:c2:e5:6b:58:5a:54:
                    2e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C2:89:1B:6E:0C:57:DC:11:21:0A:4B:F5:48:D6:1A:FE:50:DA:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/5ddd70f4-bc84-3549-984b-36450174ee46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f2:dc:09:ec:1b:51:24:fe:90:4d:24:d8:ed:ba:6e:59:71:
         78:ee:27:37:08:ca:6f:7a:aa:6f:21:f4:cb:dd:cf:22:33:9a:
         db:9e:24:1d:9e:14:fc:dc:10:6f:41:0f:2f:37:bd:3a:35:59:
         d2:af:ff:55:e6:4e:d8:83:4d:f1:88:c7:70:9d:ff:cf:9b:ee:
         99:b2:86:32:e8:81:2f:c7:9f:84:46:49:05:5d:56:bc:01:c6:
         b8:34:4b:7b:9c:ea:95:3f:32:1d:d3:81:c3:b3:ff:ab:b0:f4:
         d4:4f:2b:6a:d0:da:39:bf:ec:b0:8a:3e:70:c9:1b:2f:b1:71:
         56:67:ee:dd:d0:49:96:90:04:d9:e8:90:01:2d:b9:26:78:cb:
         94:b5:d8:74:79:30:af:07:f6:98:a5:60:fb:c1:48:89:48:61:
         c8:10:24:fa:3d:6c:ce:05:13:5d:11:b5:9b:41:f0:6e:08:7a:
         3d:bd:c9:e1:92:76:a4:d6:32:6b:9f:e6:8a:84:62:87:83:99:
         9b:5a:a7:5d:b2:b0:d6:f3:79:a1:a6:fd:df:29:eb:df:2c:88:
         cc:10:8c:43:7a:d0:f9:be:1f:64:a2:39:69:bf:4f:a2:5e:a1:
         a0:92:7f:59:10:fa:25:bb:5b:cd:81:91:0f:7d:ba:6f:90:52:
         00:1f:a2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----