Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/62766043-7c60-326e-87b2-c1cd613fe701.roa
File:                     62766043-7c60-326e-87b2-c1cd613fe701.roa (raw, json)
Hash identifier:          7Wi3cSRXkMgX+Y5R090ZR4wjkGBO1h5IDAmMzyz9ADM=
Subject key identifier:   95:67:FB:08:2D:90:DA:F7:3E:E0:30:F4:32:72:45:D7:DE:5E:9C:3F
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583CEC51037F075AAAAD44124400
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/62766043-7c60-326e-87b2-c1cd613fe701.roa
Signing time:             Mon 14 Feb 2022 05:00:00 +0000
ROA not before:           Mon 14 Feb 2022 05:00:00 +0000
ROA not after:            Tue 14 Feb 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ec:51:03:7f:07:5a:aa:ad:44:12:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Feb 14 05:00:00 2022 GMT
            Not After : Feb 14 05:00:00 2023 GMT
        Subject: CN=4610ebaa-2055-4c5d-88af-f59f59e4e0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:34:d2:34:f8:7c:52:fc:f1:c1:f4:9f:8c:15:
                    c7:e0:a3:88:34:0d:93:2e:02:d6:02:9d:31:04:ef:
                    76:1b:62:36:1b:c7:88:ed:d4:d2:c9:dc:27:41:fb:
                    66:f7:7f:e6:4e:d9:98:c1:80:00:fd:67:75:7f:4d:
                    a0:bf:89:81:41:23:99:c2:b9:4c:8b:17:8e:91:9a:
                    c4:ed:2a:b4:7a:96:ee:0b:4c:99:4f:db:a5:3b:3f:
                    83:a3:35:99:44:ad:4a:a2:66:d3:d5:41:6a:88:6c:
                    da:6e:36:0c:d6:56:66:8b:a4:d3:4a:35:63:10:e5:
                    60:83:ee:8f:14:c6:48:02:23:80:86:a0:29:fd:d5:
                    ee:50:c1:06:da:10:dd:e9:11:fe:f8:6d:f8:68:ef:
                    d1:fd:73:d2:ec:9a:96:13:f3:72:d6:e1:b8:3e:5b:
                    e2:5c:21:a9:11:cf:8a:23:2a:19:f0:d1:4c:d6:a0:
                    f6:d5:ed:90:97:ca:b2:24:9f:f5:28:12:b4:61:69:
                    86:27:1f:68:c1:95:ed:69:80:44:13:06:cd:12:2b:
                    31:f0:ce:5e:5c:1e:4b:98:b0:9a:1c:ac:ac:3b:a0:
                    66:b6:a2:94:09:98:c0:f4:09:75:ef:0a:1b:b0:1f:
                    aa:af:10:bb:2e:37:a9:e0:52:05:7c:3b:f5:6d:0f:
                    58:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:67:FB:08:2D:90:DA:F7:3E:E0:30:F4:32:72:45:D7:DE:5E:9C:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/62766043-7c60-326e-87b2-c1cd613fe701.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:bd:3c:62:7f:3d:ed:60:61:ea:7b:4e:d6:56:fd:f4:10:de:
         3c:48:c2:d9:c4:68:f8:24:ce:1d:51:d4:48:9e:01:28:36:4d:
         75:ae:cb:43:0c:8a:fd:19:c6:1a:fe:22:92:ec:a5:a9:b9:47:
         9e:a2:7b:e0:b3:41:ed:51:20:4e:af:b6:48:e7:6b:4f:f4:92:
         5d:70:af:12:5c:8f:67:07:b2:60:16:f4:5b:21:6d:fc:3a:f3:
         40:b1:1a:bc:c6:09:71:58:d4:27:e1:53:06:b7:9a:02:14:fd:
         09:86:b8:59:17:9e:b6:4a:41:01:e1:c6:b6:95:6c:a7:74:8a:
         a5:27:a8:e7:80:58:96:27:6d:5a:a1:f6:42:50:3f:0f:6f:5d:
         ab:9c:81:da:62:cf:54:ae:fb:07:a6:a4:60:f9:d5:fc:93:b0:
         23:13:89:38:c6:30:cd:7f:a3:b2:42:3d:d4:b7:c3:69:2d:12:
         f3:ba:38:ad:76:b4:71:d4:a9:42:d0:69:6d:0d:15:3a:9f:3a:
         68:d8:e4:1c:22:f1:7e:7a:69:57:92:bb:e2:c8:72:9b:65:bf:
         98:d1:10:aa:d5:72:b5:1f:9b:4b:01:69:93:47:2c:29:fb:db:
         d3:55:b6:bd:c9:fe:76:ec:f5:80:88:ab:cd:74:13:3c:62:e5:
         ce:d5:e8:be
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDzsUQN/B1qqrUQSRAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDIxNDA1MDAwMFoXDTIzMDIxNDA1MDAwMFowLzEtMCsGA1UEAxMk
NDYxMGViYWEtMjA1NS00YzVkLTg4YWYtZjU5ZjU5ZTRlMGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzTSNPh8UvzxwfSfjBXH4KOINA2TLgLWAp0x
BO92G2I2G8eI7dTSydwnQftm93/mTtmYwYAA/Wd1f02gv4mBQSOZwrlMixeOkZrE
7Sq0epbuC0yZT9ulOz+DozWZRK1KombT1UFqiGzabjYM1lZmi6TTSjVjEOVgg+6P
FMZIAiOAhqAp/dXuUMEG2hDd6RH++G34aO/R/XPS7JqWE/Ny1uG4PlviXCGpEc+K
IyoZ8NFM1qD21e2Ql8qyJJ/1KBK0YWmGJx9owZXtaYBEEwbNEisx8M5eXB5LmLCa
HKysO6BmtqKUCZjA9Al17wobsB+qrxC7Ljep4FIFfDv1bQ9YBQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJVn+wgtkNr3PuAw9DJyRdfeXpw/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvNjI3NjYwNDMtN2M2MC0z
MjZlLTg3YjItYzFjZDYxM2ZlNzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADi9PGJ/Pe1gYep7TtZW/fQQ3jxIwtnEaPgkzh1R1EieASg2TXWu
y0MMiv0Zxhr+IpLspam5R56ie+CzQe1RIE6vtkjna0/0kl1wrxJcj2cHsmAW9Fsh
bfw680CxGrzGCXFY1CfhUwa3mgIU/QmGuFkXnrZKQQHhxraVbKd0iqUnqOeAWJYn
bVqh9kJQPw9vXaucgdpiz1Su+wempGD51fyTsCMTiTjGMM1/o7JCPdS3w2ktEvO6
OK12tHHUqULQaW0NFTqfOmjY5Bwi8X56aVeSu+LIcptlv5jREKrVcrUfm0sBaZNH
LCn729NVtr3J/nbs9YCIq810Ezxi5c7V6L4=
-----END CERTIFICATE-----