Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/6a53384a-0ca9-3d78-863c-952a6d14fc1a.roa
File:                     6a53384a-0ca9-3d78-863c-952a6d14fc1a.roa (raw, json)
Hash identifier:          3qtXgSsxWtYGa5Vd+dZ/XIqJkNzYqbbE0FVF4UfDAZs=
Subject key identifier:   8F:88:66:0E:EB:49:63:08:BF:26:AB:66:C6:1D:C6:38:CE:8C:97:C5
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583EA53839AF0E1080D8C905EEC0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/6a53384a-0ca9-3d78-863c-952a6d14fc1a.roa
Signing time:             Thu 21 Jul 2022 12:00:00 +0000
ROA not before:           Thu 21 Jul 2022 12:00:00 +0000
ROA not after:            Sat 22 Jul 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:a5:38:39:af:0e:10:80:d8:c9:05:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jul 21 12:00:00 2022 GMT
            Not After : Jul 22 04:00:00 2023 GMT
        Subject: CN=4515d54a-db49-4b34-b35a-9ecf1cc76918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:f7:ad:b7:5c:4a:10:1a:8a:c9:3b:56:16:
                    57:bf:15:22:86:8c:60:39:46:9b:fe:70:95:b9:ab:
                    ac:ae:00:68:e7:e4:ca:56:27:3e:dc:45:89:22:11:
                    30:10:31:71:3d:0f:10:26:a0:6d:08:7d:48:df:87:
                    16:d1:cc:1c:ee:93:d4:04:9d:15:ee:87:e4:3c:1c:
                    fc:92:a7:b2:5e:5c:a8:04:cb:f7:6c:ac:f7:d3:2c:
                    2c:3d:91:5f:d8:7f:38:67:72:f1:c5:6b:a4:f0:1f:
                    40:f3:83:48:92:45:ee:2c:66:5b:05:5a:a4:a5:96:
                    18:b2:fd:15:3d:ca:c8:a6:78:27:fe:8e:a5:8f:c0:
                    84:25:e4:a1:e5:17:a3:8f:44:2f:9d:20:95:06:c3:
                    e0:6f:ee:05:08:85:c8:82:84:1d:33:1b:39:64:7e:
                    b2:f3:4d:c0:fd:ae:72:da:29:77:5e:71:c4:4b:24:
                    53:d0:60:18:2a:a2:72:57:2d:71:b9:62:b4:90:55:
                    c5:02:b2:66:6b:29:cb:02:03:38:ad:ee:c8:89:99:
                    08:9a:71:fc:9a:bf:da:b5:c7:da:17:1c:c9:46:92:
                    d2:ba:ad:f4:70:8e:e6:e0:8e:a3:71:52:80:4b:e5:
                    cb:db:cb:dd:97:bb:14:60:05:e3:cb:44:58:7d:cc:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:88:66:0E:EB:49:63:08:BF:26:AB:66:C6:1D:C6:38:CE:8C:97:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/6a53384a-0ca9-3d78-863c-952a6d14fc1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:11:3c:52:ce:1a:a2:18:fd:4f:05:1b:24:1c:f4:c8:e4:9b:
         c6:b7:47:3c:76:c0:2b:73:16:1a:09:66:bb:ba:d4:5a:03:48:
         30:a2:97:e0:bd:6e:27:14:29:17:fa:06:10:d5:e3:94:fa:56:
         9f:62:3c:24:32:df:6c:ad:32:b8:8d:64:9f:4d:d0:ff:54:02:
         c8:69:6d:b5:f9:3e:e2:c6:31:81:87:11:21:5c:f8:5a:4b:04:
         16:4d:d7:f1:6d:3b:90:6c:5c:5b:04:9f:f6:f1:de:f9:eb:b3:
         1c:ce:cc:e4:01:2f:e0:77:f2:1d:a5:df:f8:49:bc:53:d5:2b:
         93:d2:b2:2c:4d:7e:1c:a5:49:44:48:38:4d:d2:cb:7d:41:62:
         88:20:cc:40:df:45:04:39:4d:75:f4:88:f8:f2:2b:0c:dd:4a:
         56:eb:90:2d:bd:f3:a6:0a:ff:29:e0:6c:e4:7b:be:84:62:46:
         6b:9e:48:92:86:67:d3:f1:87:fd:ef:b3:73:eb:0e:f7:eb:55:
         8c:95:00:d7:10:f5:b4:5d:62:b6:3e:7e:e3:48:25:65:ab:ab:
         63:33:9a:27:76:4f:c5:5d:14:ad:33:9f:51:34:20:ff:e2:39:
         33:d7:64:1d:89:c8:a5:c7:27:11:f2:a7:b3:34:b0:65:e9:9d:
         8a:b1:83:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----