Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/72276bfe-79ba-37b5-9136-fc12fd13e2f3.roa
File:                     72276bfe-79ba-37b5-9136-fc12fd13e2f3.roa (raw, json)
Hash identifier:          a3uJCKhONxLFzQ+HJkinxXcELt7TujVFAZKm8K+bNTc=
Subject key identifier:   ED:A7:6A:0F:49:31:A7:63:24:68:26:AE:B3:39:0B:37:97:E3:2D:DB
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583FB9F1A3422D5EAAC114F8F844
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/72276bfe-79ba-37b5-9136-fc12fd13e2f3.roa
Signing time:             Fri 28 Oct 2022 12:00:00 +0000
ROA not before:           Fri 28 Oct 2022 12:00:00 +0000
ROA not after:            Sun 29 Oct 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:f1:a3:42:2d:5e:aa:c1:14:f8:f8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Oct 28 12:00:00 2022 GMT
            Not After : Oct 29 04:00:00 2023 GMT
        Subject: CN=d709c81b-038e-423b-ae30-fe6ddf648c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:43:bd:16:f7:05:da:5b:6a:28:51:14:80:
                    c1:8d:76:79:ea:23:14:9d:89:d9:21:3e:6a:d6:eb:
                    dc:d1:77:56:3e:53:ef:d4:b0:86:2a:e0:e5:55:e9:
                    6f:72:55:18:5f:6a:2a:99:cb:82:82:88:02:02:24:
                    47:14:90:9f:2f:1f:b0:4a:cf:cb:a2:65:d9:3a:59:
                    63:56:e3:c2:74:cc:36:19:4d:72:dc:53:3d:cc:8e:
                    56:94:7c:13:f5:15:b7:e7:b2:9b:8a:15:6a:7f:1e:
                    e0:d8:c7:77:19:33:bc:31:d1:34:0f:2b:9b:33:d0:
                    5d:bf:96:30:df:9a:56:ff:51:d6:9b:e6:4c:d0:a0:
                    1d:4d:de:09:56:63:41:82:c4:93:98:f3:92:af:fe:
                    0f:97:94:99:09:a0:e3:32:e5:0a:e1:71:78:42:c5:
                    5f:54:64:96:79:ba:02:03:f0:30:63:bb:d6:fc:b2:
                    e6:00:86:be:55:68:58:c5:ae:64:eb:1d:18:8c:8d:
                    d2:e3:c2:1e:f2:e1:78:f2:0d:9c:85:fa:86:44:63:
                    3a:88:38:f5:9d:07:6e:bc:95:10:49:9a:68:41:1c:
                    c3:66:d0:b2:b4:c0:0f:39:9d:78:4c:dd:88:a1:fd:
                    ce:c6:4d:a1:5e:23:e6:8d:74:da:f0:68:2f:29:0f:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A7:6A:0F:49:31:A7:63:24:68:26:AE:B3:39:0B:37:97:E3:2D:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/72276bfe-79ba-37b5-9136-fc12fd13e2f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:06:e9:6c:02:d6:e2:0c:5e:a9:fa:a4:89:d5:20:d4:d1:ab:
         e3:15:5f:71:af:7c:87:35:b9:c5:50:dd:71:e6:d3:db:4e:37:
         86:c0:49:af:77:b7:ff:06:8f:07:38:91:c9:6d:49:16:17:3a:
         74:f1:26:51:c9:d1:d2:94:ad:b4:19:8c:c1:e3:0f:78:04:a6:
         66:b3:5a:aa:99:49:85:a0:6b:dd:41:81:b4:96:54:81:78:be:
         60:80:e7:0c:fc:ee:4b:5c:f5:3d:4c:eb:01:86:f1:40:24:18:
         4a:8d:f7:e4:13:3f:ad:02:e4:0f:17:71:25:ca:78:3e:98:5c:
         db:10:75:89:cc:0d:bf:32:1f:80:93:ed:4b:36:24:d0:cb:10:
         b5:98:32:1d:83:77:a7:5d:0d:f1:92:a9:f7:d3:3a:1d:eb:1f:
         00:56:bd:e1:09:99:73:5e:fd:fe:ce:38:43:f4:da:e5:c4:b4:
         62:60:55:07:c3:54:2c:b8:05:f9:44:9c:fd:58:c9:86:61:42:
         50:2e:3e:30:d5:e7:d8:9a:80:0e:70:be:2a:1f:d1:44:57:3a:
         f7:ee:4f:d8:84:7e:8d:5f:d3:53:41:15:86:22:16:f4:27:f9:
         ee:37:e3:9b:12:00:2a:34:2d:72:37:cb:10:e9:bc:65:6a:47:
         6c:24:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----