Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/889784cc-f534-39d5-bafa-b6ea87d496da.roa
File:                     889784cc-f534-39d5-bafa-b6ea87d496da.roa (raw, json)
Hash identifier:          HBKLDshvc9Z4UX0FV/owAhSLiRWRTOh2hSL4XNxKggs=
Subject key identifier:   59:9A:08:66:BC:55:35:3D:A8:AE:04:53:8F:4D:18:40:6E:46:9A:77
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583FFD14E15D67A251B079D32080
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/889784cc-f534-39d5-bafa-b6ea87d496da.roa
Signing time:             Mon 21 Nov 2022 12:00:00 +0000
ROA not before:           Mon 21 Nov 2022 12:00:00 +0000
ROA not after:            Wed 22 Nov 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fd:14:e1:5d:67:a2:51:b0:79:d3:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Nov 21 12:00:00 2022 GMT
            Not After : Nov 22 05:00:00 2023 GMT
        Subject: CN=2b95ce18-c730-4029-9e5c-e9daf6db1ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:c6:4d:b6:e6:2b:8b:4d:d2:71:46:ba:9f:
                    bd:ba:8e:f7:85:4e:fd:1c:d7:28:bc:e0:ac:01:7a:
                    4b:da:ed:88:b7:32:97:5b:70:dc:9d:3e:e7:56:c2:
                    e2:5d:14:35:15:49:25:8c:ba:56:99:7a:20:df:66:
                    a7:b8:77:ef:34:11:44:29:4e:72:58:71:6c:b3:0d:
                    af:3c:89:c6:0a:3b:8e:51:8b:9d:3d:64:cf:01:22:
                    8e:11:35:e7:3c:01:b9:48:d5:32:06:ca:8a:ae:b0:
                    90:a6:eb:e1:41:8c:1b:3b:c9:aa:88:8c:7d:2c:16:
                    b9:68:b5:17:b9:bd:8d:65:b8:0e:b1:7c:43:5a:af:
                    a9:d6:94:62:ec:71:02:1b:ba:ad:d6:96:64:a4:05:
                    d4:63:00:ce:1e:fb:4e:1b:80:eb:fb:d8:eb:50:eb:
                    d1:62:78:bd:6b:5d:29:d0:77:3c:f9:83:97:b4:61:
                    45:37:5f:58:54:8a:8f:38:cf:e6:cd:d6:78:71:53:
                    c2:cb:7f:b4:fc:15:68:b4:d5:e5:bb:aa:1c:c5:f4:
                    62:d0:01:3b:1b:04:7d:77:85:e7:15:1e:9c:16:96:
                    43:e8:94:71:70:53:c0:20:1d:4c:6f:d8:8f:ad:25:
                    d3:19:55:5a:81:70:e4:0d:3b:cf:50:c4:40:fa:7e:
                    6e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9A:08:66:BC:55:35:3D:A8:AE:04:53:8F:4D:18:40:6E:46:9A:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/889784cc-f534-39d5-bafa-b6ea87d496da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e4:1f:53:7e:f2:79:94:6d:f7:ce:80:89:d2:8d:1a:36:2e:
         be:61:5e:5a:e6:6a:ef:86:0a:10:7b:55:9e:5e:6f:6a:23:5d:
         ef:c7:6c:1f:ec:36:99:1c:3b:1f:e9:f6:1e:df:69:06:49:08:
         d7:a5:23:93:cf:ea:c3:e4:cb:e9:0b:5f:55:0f:d7:62:e8:fd:
         e5:2d:ae:1f:7a:b7:b9:2c:8e:25:06:18:b2:5a:e0:d0:7a:ac:
         f9:5c:21:2f:b5:d4:be:e3:c8:64:d7:3d:95:fe:45:6f:ad:1b:
         c1:cd:4c:7f:1e:9e:8f:31:3d:15:b9:12:01:8a:9b:5a:48:36:
         75:b3:bc:42:d7:85:e3:26:34:9c:52:77:30:95:a9:38:0d:12:
         2a:e3:93:c1:c8:5c:75:cb:f4:42:8f:72:85:e8:5a:6e:b4:ec:
         68:35:76:f8:41:c7:72:19:c2:9e:13:f8:d9:44:a2:84:5f:f7:
         6c:2f:bc:13:f8:b6:00:fe:47:d0:4e:b4:09:ef:d8:dc:de:79:
         72:8b:17:07:76:60:41:10:1d:f1:f9:97:6a:4e:d3:c9:45:78:
         4a:c3:e9:e5:94:94:a8:0a:d1:01:a2:57:b7:1e:e7:e4:da:1e:
         80:94:83:7f:ff:d7:24:87:90:a3:66:7e:37:bc:06:88:87:38:
         79:ab:a3:8b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD/9FOFdZ6JRsHnTIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMTEyMTEyMDAwMFoXDTIzMTEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
MmI5NWNlMTgtYzczMC00MDI5LTllNWMtZTlkYWY2ZGIxYWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/zGTbbmK4tN0nFGup+9uo73hU79HNcovOCs
AXpL2u2ItzKXW3DcnT7nVsLiXRQ1FUkljLpWmXog32anuHfvNBFEKU5yWHFssw2v
PInGCjuOUYudPWTPASKOETXnPAG5SNUyBsqKrrCQpuvhQYwbO8mqiIx9LBa5aLUX
ub2NZbgOsXxDWq+p1pRi7HECG7qt1pZkpAXUYwDOHvtOG4Dr+9jrUOvRYni9a10p
0Hc8+YOXtGFFN19YVIqPOM/mzdZ4cVPCy3+0/BVotNXlu6ocxfRi0AE7GwR9d4Xn
FR6cFpZD6JRxcFPAIB1Mb9iPrSXTGVVagXDkDTvPUMRA+n5ugQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFmaCGa8VTU9qK4EU49NGEBuRpp3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvODg5Nzg0Y2MtZjUzNC0z
OWQ1LWJhZmEtYjZlYTg3ZDQ5NmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJLkH1N+8nmUbffOgInSjRo2Lr5hXlrmau+GChB7VZ5eb2ojXe/H
bB/sNpkcOx/p9h7faQZJCNelI5PP6sPky+kLX1UP12Lo/eUtrh96t7ksjiUGGLJa
4NB6rPlcIS+11L7jyGTXPZX+RW+tG8HNTH8eno8xPRW5EgGKm1pINnWzvELXheMm
NJxSdzCVqTgNEirjk8HIXHXL9EKPcoXoWm607Gg1dvhBx3IZwp4T+NlEooRf92wv
vBP4tgD+R9BOtAnv2NzeeXKLFwd2YEEQHfH5l2pO08lFeErD6eWUlKgK0QGiV7ce
5+TaHoCUg3//1ySHkKNmfje8BoiHOHmro4s=
-----END CERTIFICATE-----