Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/76f3280d-af75-35f6-b0d3-25357e4e212d.roa
File:                     76f3280d-af75-35f6-b0d3-25357e4e212d.roa (raw, json)
Hash identifier:          V9KLDj0XkLEv7liwj/IsTlrjq7AlT4KvWL+MJN5fF0Y=
Subject key identifier:   EB:49:FF:3D:A9:13:F6:A8:CA:18:9A:19:5E:83:D0:A4:18:B8:CE:66
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583E3E778E66A68AD8EB709ABE80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/76f3280d-af75-35f6-b0d3-25357e4e212d.roa
Signing time:             Tue 14 Jun 2022 12:00:00 +0000
ROA not before:           Tue 14 Jun 2022 12:00:00 +0000
ROA not after:            Thu 15 Jun 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:3e:77:8e:66:a6:8a:d8:eb:70:9a:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jun 14 12:00:00 2022 GMT
            Not After : Jun 15 04:00:00 2023 GMT
        Subject: CN=5187c24b-0145-437d-a229-9be104ed67d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:33:c3:8b:ef:8c:61:b0:af:0e:cf:a4:74:
                    e8:ed:5e:71:83:6a:a2:be:ff:97:07:bb:d3:69:eb:
                    6b:d3:8d:69:17:f1:fe:09:92:13:33:cc:82:06:05:
                    49:e8:1d:bc:ba:10:d8:e4:de:f8:b5:c4:72:e4:43:
                    7a:da:5a:5b:6d:39:1c:f0:9c:d8:68:81:fb:a8:87:
                    1d:9c:51:3d:0e:48:7f:63:99:e6:63:ab:bf:11:48:
                    82:f2:bb:a9:23:eb:51:fa:71:28:61:9f:3a:09:01:
                    15:48:fc:de:2c:d0:cc:83:8d:77:15:9e:e8:68:87:
                    03:b5:cf:be:7b:3a:b7:3a:26:29:90:19:2d:a8:08:
                    81:ab:bd:27:9c:2f:df:4c:08:26:a5:b1:64:98:5a:
                    b0:12:8d:15:44:d7:62:4d:68:e3:55:d7:a0:55:46:
                    ed:40:ea:06:08:cb:48:fb:4b:ad:61:bc:7f:f3:12:
                    3d:9b:25:5b:16:c3:17:ed:20:63:15:72:39:a8:fc:
                    20:66:a2:88:03:d1:54:f4:02:64:f2:e1:cf:6e:cc:
                    c0:f1:fc:c4:ad:e6:34:97:28:18:f5:dc:26:89:e7:
                    0f:a4:ce:79:c0:47:4d:c1:8a:06:b2:03:32:a5:20:
                    ce:66:2d:94:a4:5e:7b:42:91:82:f4:ac:1b:4d:a9:
                    dd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:49:FF:3D:A9:13:F6:A8:CA:18:9A:19:5E:83:D0:A4:18:B8:CE:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/76f3280d-af75-35f6-b0d3-25357e4e212d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a5:d3:23:a8:f7:f0:8b:dc:34:5f:40:f5:d5:f1:b0:17:61:
         3d:87:9e:45:d0:8e:da:ce:c9:7a:ef:88:8d:90:87:7e:6d:05:
         38:bd:7f:60:08:05:88:38:e7:c3:2c:b9:22:54:11:5a:33:ad:
         d4:98:9b:6f:81:d7:df:52:40:2d:a7:c5:86:d3:19:eb:61:ee:
         be:49:d2:5b:5b:a4:03:74:59:60:8e:cf:a1:f8:8d:00:1a:2a:
         04:c5:38:6b:1f:04:c9:83:ef:4c:8c:dc:1f:93:6c:83:01:96:
         2c:d2:c4:73:12:9a:89:53:c7:53:da:02:30:91:bb:6e:e1:65:
         a3:3f:14:b0:bb:65:78:4e:a2:55:79:98:cd:20:dc:38:96:7e:
         ec:e8:93:89:13:f6:82:96:16:30:33:7e:1c:96:a0:ea:cc:d3:
         08:72:8f:a3:4d:03:79:4c:52:d4:3d:cc:e6:e3:61:02:79:34:
         1a:14:f5:9e:73:7a:86:be:61:a3:6d:b0:01:d0:95:26:fd:b1:
         c9:4d:b4:9e:c3:41:4f:4a:bc:b5:46:5b:43:03:a0:a5:61:10:
         de:76:c0:b5:77:9b:b3:58:4a:4a:62:18:9a:7a:3f:9e:35:64:
         7f:42:12:c8:f4:6c:fc:ab:f4:f1:3c:da:63:a8:5f:46:4b:48:
         2b:11:07:4f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD4+d45mporY63CavoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDYxNDEyMDAwMFoXDTIzMDYxNTA0MDAwMFowLzEtMCsGA1UEAxMk
NTE4N2MyNGItMDE0NS00MzdkLWEyMjktOWJlMTA0ZWQ2N2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsEzw4vvjGGwrw7PpHTo7V5xg2qivv+XB7vT
aetr041pF/H+CZITM8yCBgVJ6B28uhDY5N74tcRy5EN62lpbbTkc8JzYaIH7qIcd
nFE9Dkh/Y5nmY6u/EUiC8rupI+tR+nEoYZ86CQEVSPzeLNDMg413FZ7oaIcDtc++
ezq3OiYpkBktqAiBq70nnC/fTAgmpbFkmFqwEo0VRNdiTWjjVdegVUbtQOoGCMtI
+0utYbx/8xI9myVbFsMX7SBjFXI5qPwgZqKIA9FU9AJk8uHPbszA8fzEreY0lygY
9dwmiecPpM55wEdNwYoGsgMypSDOZi2UpF57QpGC9KwbTandWwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOtJ/z2pE/aoyhiaGV6D0KQYuM5mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvNzZmMzI4MGQtYWY3NS0z
NWY2LWIwZDMtMjUzNTdlNGUyMTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGil0yOo9/CL3DRfQPXV8bAXYT2HnkXQjtrOyXrviI2Qh35tBTi9
f2AIBYg458MsuSJUEVozrdSYm2+B199SQC2nxYbTGeth7r5J0ltbpAN0WWCOz6H4
jQAaKgTFOGsfBMmD70yM3B+TbIMBlizSxHMSmolTx1PaAjCRu27hZaM/FLC7ZXhO
olV5mM0g3DiWfuzok4kT9oKWFjAzfhyWoOrM0whyj6NNA3lMUtQ9zObjYQJ5NBoU
9Z5zeoa+YaNtsAHQlSb9sclNtJ7DQU9KvLVGW0MDoKVhEN52wLV3m7NYSkpiGJp6
P541ZH9CEsj0bPyr9PE82mOoX0ZLSCsRB08=
-----END CERTIFICATE-----