Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/85fd5447-254e-3f3a-b8b4-d91ee45f0ff1.roa
File:                     85fd5447-254e-3f3a-b8b4-d91ee45f0ff1.roa (raw, json)
Hash identifier:          xWWh2IEeMSKr0XTr/+twaHyqS7seaF8UAmxMK+PPumY=
Subject key identifier:   B5:73:41:B1:F9:A4:90:A0:A5:E4:87:06:A6:C1:CA:12:04:C4:BC:4A
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583D5905A93EFAE34FD7E8A56EC0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/85fd5447-254e-3f3a-b8b4-d91ee45f0ff1.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Sat 25 Mar 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:59:05:a9:3e:fa:e3:4f:d7:e8:a5:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Mar 25 04:00:00 2023 GMT
        Subject: CN=a4734aa6-0a32-493f-8a91-fd32ae587711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:1a:56:eb:3c:d3:af:5f:78:62:5b:06:90:2e:
                    26:de:07:13:17:91:46:ef:2a:5b:20:8f:05:44:85:
                    83:fe:65:c0:c2:a1:d1:6e:f7:3e:ca:f5:0e:53:0c:
                    22:49:f9:cd:46:c2:d3:58:26:8f:8d:9e:5d:92:80:
                    94:e8:fa:e1:a2:45:ee:ef:2c:4b:ce:aa:11:ac:2a:
                    1a:f8:ac:0b:ec:a6:1e:12:a0:fd:8f:13:e3:ad:4a:
                    54:f5:77:00:93:33:4f:81:f7:45:ad:19:56:26:da:
                    49:d2:0b:82:bf:9f:db:37:bb:49:ec:ec:b9:7f:b9:
                    c2:bb:62:bb:57:55:ff:ad:18:d7:ea:f2:a1:8b:ab:
                    12:b5:ea:18:33:9a:89:42:44:63:a5:e7:df:7c:e7:
                    76:47:dc:85:3f:f1:57:97:40:04:18:91:49:db:20:
                    9e:a9:dd:b0:eb:1b:4d:69:b8:80:39:6e:09:64:89:
                    3c:f1:fa:2d:68:cc:b9:c0:7c:8e:a0:ee:8a:40:cd:
                    b1:be:11:ef:ea:65:f7:e9:f1:b9:1c:a4:b8:74:d3:
                    81:b2:c3:01:4c:be:c0:89:e5:26:14:35:a3:b2:3c:
                    2a:43:bb:d7:5f:45:19:7a:8a:6c:b4:4e:11:3a:36:
                    f5:a2:3a:02:b7:4b:16:9b:36:34:ee:0a:3c:5d:9d:
                    e7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:73:41:B1:F9:A4:90:A0:A5:E4:87:06:A6:C1:CA:12:04:C4:BC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/85fd5447-254e-3f3a-b8b4-d91ee45f0ff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:db:8a:40:35:93:ef:4e:e7:9a:47:1a:67:5a:9e:b6:d7:
         d9:da:ba:6b:03:91:ed:03:c2:4a:85:3b:d4:ab:a6:92:ab:4a:
         c0:77:c0:10:0f:49:d2:96:a2:8b:de:ce:2f:13:af:00:f4:83:
         36:0f:fa:24:03:fa:c7:7f:ef:0e:b8:b4:cf:23:11:68:da:e8:
         db:43:0e:aa:62:78:ec:ae:c0:58:b4:df:72:6f:19:96:93:0d:
         78:6c:94:00:25:40:ae:3a:18:4f:4e:d4:d0:51:fe:35:d2:0a:
         fd:73:50:f1:6b:df:28:40:34:b2:0c:04:56:be:4d:2a:bc:b4:
         b7:32:a2:54:2d:e4:1b:78:bc:9d:14:00:71:64:75:af:5c:0f:
         09:fe:bd:67:af:0e:61:ae:69:6a:1b:72:b8:0b:35:b8:89:d6:
         0e:e2:74:78:d2:91:4c:76:a4:70:83:8b:84:73:9d:86:ae:74:
         b0:61:7b:e8:4e:53:39:3a:4c:bc:78:b8:57:7f:b2:a4:76:8c:
         c9:5c:5c:32:e1:14:ff:02:35:04:96:d2:11:a8:53:33:1a:4d:
         76:fc:ba:fb:81:5e:a9:59:f8:aa:dc:aa:a4:66:8b:f7:6b:bd:
         49:d5:fe:76:ee:bf:b4:f3:20:81:b2:54:3f:63:e9:3a:94:c2:
         e2:15:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----