Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/91244bb4-b4fe-3a19-a3fc-72116f8de484.roa
File:                     91244bb4-b4fe-3a19-a3fc-72116f8de484.roa (raw, json)
Hash identifier:          WeSRCCxZ9jgRokJEBSlJTw+VdWGA1ZCIzQMj0VV8NVw=
Subject key identifier:   D2:DB:BC:81:36:DF:90:39:A7:46:A9:F6:FE:D9:D2:97:E5:A0:52:3D
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583D139AFF4803D37B18EB28D760
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/91244bb4-b4fe-3a19-a3fc-72116f8de484.roa
Signing time:             Mon 28 Feb 2022 05:00:00 +0000
ROA not before:           Mon 28 Feb 2022 05:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:13:9a:ff:48:03:d3:7b:18:eb:28:d7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Feb 28 05:00:00 2022 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=a6ba5345-dfac-4324-be34-f137e29ddedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:92:67:9f:ab:ac:8c:41:ce:95:1d:ab:1f:cf:
                    91:e3:4d:53:cf:02:f6:33:70:fd:2f:82:29:d8:a2:
                    e9:23:43:88:73:e6:f0:15:db:1a:d4:08:a2:61:8f:
                    e6:8b:c4:a8:4e:05:e2:c8:d8:5a:8f:f5:38:f4:db:
                    d1:5d:0d:e8:23:f7:5e:cd:8a:70:52:7f:ca:45:b4:
                    9a:db:8d:a5:ca:f9:e5:ca:2b:b4:c0:4b:00:b0:99:
                    ed:f9:96:19:3e:f2:dc:e4:33:3b:b7:8e:85:8e:6b:
                    4b:d9:a2:c4:ac:02:37:1a:a5:c5:c7:5a:5d:41:08:
                    29:1d:88:ac:ac:6c:cd:c8:75:d0:a7:22:f6:7e:36:
                    ec:25:b5:cb:53:80:c4:69:9a:1d:54:55:27:b0:f3:
                    e9:5c:8d:f2:5f:4e:ba:f2:4e:b6:99:7a:ee:96:03:
                    41:ea:7a:cc:56:3f:47:ca:4c:48:c7:55:d3:44:85:
                    f1:dc:d0:a4:18:46:fd:26:1f:97:95:4f:d3:4a:8a:
                    b0:9e:f9:ca:ec:7c:44:af:37:19:59:4d:27:fa:3f:
                    f6:9e:99:88:b8:7a:1d:58:a9:f5:8d:a7:8d:bf:97:
                    8f:9c:ec:ed:b1:00:31:af:b9:e2:0d:d7:1e:02:82:
                    5c:ac:29:43:81:da:ea:ba:29:40:da:e7:c1:dd:d1:
                    00:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DB:BC:81:36:DF:90:39:A7:46:A9:F6:FE:D9:D2:97:E5:A0:52:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/91244bb4-b4fe-3a19-a3fc-72116f8de484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0a:fa:98:26:fd:7f:a3:52:1a:87:ad:fc:2f:3a:7b:d4:11:
         26:c2:93:10:d1:17:5f:5e:75:d0:73:1a:ad:28:c1:cb:ac:d2:
         9a:e1:c3:46:93:f0:4b:0e:0f:8a:16:b3:9d:eb:2f:ca:48:35:
         68:06:fc:06:66:6e:cd:e5:a1:06:3b:6f:46:29:1d:67:5b:5c:
         52:a1:f1:48:fc:69:b9:7a:7b:53:ab:91:b0:d3:d2:8a:63:70:
         4d:96:ea:eb:cd:c0:66:60:a1:03:49:a2:9c:15:c1:97:e4:46:
         52:6c:69:0d:3e:2b:58:15:f7:6d:43:80:7d:ee:c4:ee:ad:98:
         43:92:36:e6:f9:e7:6d:bd:b0:f7:83:e8:32:71:ed:e7:10:49:
         ed:a4:d2:47:bf:95:b8:a4:9f:9b:48:cd:65:7c:0d:6e:b0:3c:
         98:19:24:9e:ac:11:db:91:af:75:17:ef:78:fa:01:05:b9:95:
         80:6b:14:52:fb:26:94:ec:a6:bd:07:36:22:8d:20:79:b2:7b:
         af:4b:bd:29:af:55:48:df:b3:01:42:ce:1d:79:86:8d:98:53:
         41:6a:d9:02:dd:e2:67:ff:79:f6:52:98:f0:32:c0:29:c8:56:
         37:e3:73:49:0e:7d:32:45:98:a0:d2:1a:f5:72:7e:c4:dd:6a:
         81:cc:a5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----