Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/83b7a306-2bb0-3ba1-a229-50f639b4a831.roa
File:                     83b7a306-2bb0-3ba1-a229-50f639b4a831.roa (raw, json)
Hash identifier:          l6mt/Uu6YvztUK8oBQC4Bv7H3NOtyeqA9hulXxFNYoA=
Subject key identifier:   A9:54:8C:F9:75:51:BD:AE:6B:30:24:42:66:A3:D8:88:FF:5B:E7:3B
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583DDF5BA29DD60D370C5E1C3CE0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/83b7a306-2bb0-3ba1-a229-50f639b4a831.roa
Signing time:             Wed 11 May 2022 12:00:00 +0000
ROA not before:           Wed 11 May 2022 12:00:00 +0000
ROA not after:            Fri 12 May 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:df:5b:a2:9d:d6:0d:37:0c:5e:1c:3c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: May 11 12:00:00 2022 GMT
            Not After : May 12 04:00:00 2023 GMT
        Subject: CN=6a6c9ab0-759c-43a3-ba7c-cb0407cb6221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6c:c9:56:72:43:03:75:9e:c2:d4:54:df:61:
                    19:62:18:d5:c1:c5:3f:ca:a0:95:76:34:d4:ac:79:
                    64:60:ec:d1:e9:9e:3a:71:0c:2f:57:d9:bf:dd:d2:
                    6e:20:89:1d:1b:12:54:1c:9e:42:b2:55:98:4e:4c:
                    af:32:bc:85:85:1b:f3:dc:8d:f5:99:34:87:3b:d3:
                    78:cb:48:79:f4:71:5f:6d:cd:8f:e7:56:1a:1b:20:
                    02:1f:47:29:72:c5:b8:6a:af:10:29:5a:e8:ed:9c:
                    02:de:4c:72:c5:fd:d3:7a:09:08:57:3a:56:05:0b:
                    91:52:60:af:e3:1a:e8:fa:8c:43:81:b4:44:c4:70:
                    c3:6c:5b:05:9e:c5:1f:28:c1:6d:6c:3b:48:d7:26:
                    d3:dd:04:67:95:54:c0:e5:16:28:20:4e:8b:48:37:
                    e9:ac:83:5d:26:b5:4b:b1:65:71:57:41:95:5d:fa:
                    b3:06:d9:d3:33:a9:55:ac:22:c5:b5:06:a6:99:5d:
                    d6:92:23:7a:50:41:11:c3:88:87:b5:51:9a:6b:d5:
                    2a:a0:36:29:81:b2:6e:41:0d:62:df:3a:3c:62:3e:
                    47:42:88:28:47:9f:86:b7:1f:7a:f4:4d:31:42:4a:
                    68:b2:2f:82:53:4c:69:8e:d1:b9:24:28:05:89:11:
                    cf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:54:8C:F9:75:51:BD:AE:6B:30:24:42:66:A3:D8:88:FF:5B:E7:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/83b7a306-2bb0-3ba1-a229-50f639b4a831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:5d:2b:72:72:51:5f:5d:ff:c6:7e:9b:3a:e5:f7:fc:9e:82:
         8a:ca:40:1f:0d:95:ef:5d:de:73:3e:75:55:7a:52:1f:ec:ea:
         5f:44:d2:07:d8:f5:31:3c:7a:9d:83:c7:e1:6c:5a:51:fb:b0:
         b4:48:fe:3a:7b:69:09:e9:40:c5:4f:23:30:50:52:58:c6:d9:
         25:21:49:c9:0c:2e:fe:d9:0a:5d:53:33:ad:8d:36:29:7a:fb:
         32:b9:3f:52:ee:fc:5d:36:45:3f:1a:f4:b3:55:01:f7:50:c6:
         4d:4a:5c:b5:cf:10:ec:a5:ef:9f:15:e3:34:98:36:ea:90:bb:
         c8:b9:29:7d:89:3d:47:01:91:9a:c6:fd:6b:0e:81:d0:ca:c4:
         ed:a8:77:65:1b:c1:c6:28:80:cb:92:d3:71:a6:b0:1b:b6:14:
         d7:6b:37:58:c6:c2:99:ac:bd:07:68:4f:16:d7:d3:11:9c:b0:
         12:93:01:9c:ff:01:fc:0b:f6:ff:c5:88:86:65:9e:2e:f3:9f:
         a2:7e:da:18:9b:fd:6c:a2:45:42:35:cf:9b:b8:a2:06:c5:0b:
         51:75:95:fb:33:71:64:40:94:a7:70:8f:4c:75:9b:5c:3a:26:
         b7:2d:43:f7:b3:dd:a7:48:1b:6d:f6:78:7a:66:37:06:45:04:
         4c:2e:d2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----