Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9e41f627-91c4-3b72-b991-e3d764990e8d.roa
File:                     9e41f627-91c4-3b72-b991-e3d764990e8d.roa (raw, json)
Hash identifier:          nuJIN26W5a8kighpcI84959LhkS0Dvew51RQgEBXTv4=
Subject key identifier:   72:23:65:10:18:7C:44:D8:DB:6A:ED:CA:22:9F:DB:1F:A7:07:06:41
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F43285840137D9B3D4DF4ED7B45D3D438
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9e41f627-91c4-3b72-b991-e3d764990e8d.roa
Signing time:             Tue 29 Nov 2022 12:00:00 +0000
ROA not before:           Tue 29 Nov 2022 12:00:00 +0000
ROA not after:            Thu 30 Nov 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:13:7d:9b:3d:4d:f4:ed:7b:45:d3:d4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Nov 29 12:00:00 2022 GMT
            Not After : Nov 30 05:00:00 2023 GMT
        Subject: CN=c698ca86-5f62-4688-8681-15e01b62ea40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:70:e8:d2:51:64:b3:5f:fa:70:8a:ae:52:
                    95:35:90:d6:b0:63:8f:a1:74:97:a2:c3:a4:f1:dc:
                    ac:5c:19:35:7d:5d:1e:2d:6d:39:51:24:fc:30:1f:
                    3b:ce:a3:6f:c4:ab:1f:b5:3c:de:4a:1f:eb:37:4f:
                    02:f5:f9:66:b0:e9:a8:77:c5:14:a6:af:9e:e0:01:
                    8b:b0:44:5f:8c:a8:40:a2:3b:ea:0c:36:75:99:02:
                    c1:da:49:fd:5f:6a:03:e2:41:18:ce:47:a6:17:c1:
                    f5:a2:09:25:e6:d4:06:57:37:6a:93:db:d0:da:4b:
                    7d:28:95:45:5c:3c:12:ab:f0:72:ec:9e:a8:bb:40:
                    9e:de:63:49:92:8a:37:d5:fc:97:54:6b:b4:70:4f:
                    8e:84:f8:44:92:2b:a1:7d:b7:ee:e9:08:54:8e:8d:
                    2d:2a:bb:8f:47:8c:08:63:3a:9e:17:16:3f:47:67:
                    94:3f:e4:06:07:a9:71:26:dc:37:87:49:51:df:78:
                    59:a9:fc:9a:53:d2:f7:4f:09:de:30:84:56:6c:0e:
                    08:39:66:27:0c:2c:55:14:e5:f5:67:cd:e9:13:30:
                    ec:50:6e:6d:d9:69:7d:25:15:4d:96:21:8f:7f:7b:
                    b5:3d:06:93:45:32:5a:6d:d3:89:f0:3d:29:4e:a1:
                    13:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:23:65:10:18:7C:44:D8:DB:6A:ED:CA:22:9F:DB:1F:A7:07:06:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/9e41f627-91c4-3b72-b991-e3d764990e8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:dc:fb:8b:2a:cc:9e:f2:44:5c:44:a1:25:4b:9b:ed:df:f3:
         80:9c:95:02:5c:6c:25:64:0e:a2:05:77:62:24:61:a4:ad:19:
         e8:7e:b0:24:fa:38:0e:78:85:d8:23:81:d1:91:96:26:f3:c2:
         98:66:70:7a:57:a9:09:29:bf:a8:ce:6f:e9:a8:21:70:c3:0e:
         24:8b:61:4b:66:40:66:db:94:a4:42:cd:71:bd:04:30:00:77:
         10:44:f6:d3:82:b3:0d:98:1a:59:4b:7d:2e:c5:46:df:5a:0d:
         e3:4d:81:c7:7d:7a:82:b6:61:97:c9:16:69:5e:00:50:84:8e:
         14:4a:ff:53:2b:a0:1e:67:50:4d:7e:e2:24:4b:db:15:91:09:
         99:c3:d7:d6:d5:3f:b5:e2:01:e4:ed:58:7f:23:f7:80:88:33:
         87:fd:4b:c7:d2:53:5e:84:6c:10:79:e8:cf:c8:d5:49:94:92:
         43:ff:24:07:82:da:12:3b:e0:78:1d:c6:e4:7c:87:ce:82:57:
         43:e5:76:3d:2e:09:e6:76:83:f0:d7:0a:02:ed:86:16:05:7e:
         38:b2:4a:69:5b:d8:3e:7b:74:0c:69:14:73:bd:c5:de:7a:41:
         79:e5:c2:2a:43:0b:4c:ab:07:83:d3:78:c3:46:dc:8e:c6:1b:
         a5:d0:bb:63
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEATfZs9TfTte0XT1DgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMTEyOTEyMDAwMFoXDTIzMTEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
YzY5OGNhODYtNWY2Mi00Njg4LTg2ODEtMTVlMDFiNjJlYTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsshw6NJRZLNf+nCKrlKVNZDWsGOPoXSXosOk
8dysXBk1fV0eLW05UST8MB87zqNvxKsftTzeSh/rN08C9flmsOmod8UUpq+e4AGL
sERfjKhAojvqDDZ1mQLB2kn9X2oD4kEYzkemF8H1ogkl5tQGVzdqk9vQ2kt9KJVF
XDwSq/By7J6ou0Ce3mNJkoo31fyXVGu0cE+OhPhEkiuhfbfu6QhUjo0tKruPR4wI
YzqeFxY/R2eUP+QGB6lxJtw3h0lR33hZqfyaU9L3TwneMIRWbA4IOWYnDCxVFOX1
Z83pEzDsUG5t2Wl9JRVNliGPf3u1PQaTRTJabdOJ8D0pTqETnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHIjZRAYfETY22rtyiKf2x+nBwZBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvOWU0MWY2MjctOTFjNC0z
YjcyLWI5OTEtZTNkNzY0OTkwZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAITc+4sqzJ7yRFxEoSVLm+3f84CclQJcbCVkDqIFd2IkYaStGeh+
sCT6OA54hdgjgdGRlibzwphmcHpXqQkpv6jOb+moIXDDDiSLYUtmQGbblKRCzXG9
BDAAdxBE9tOCsw2YGllLfS7FRt9aDeNNgcd9eoK2YZfJFmleAFCEjhRK/1MroB5n
UE1+4iRL2xWRCZnD19bVP7XiAeTtWH8j94CIM4f9S8fSU16EbBB56M/I1UmUkkP/
JAeC2hI74HgdxuR8h86CV0Pldj0uCeZ2g/DXCgLthhYFfjiySmlb2D57dAxpFHO9
xd56QXnlwipDC0yrB4PTeMNG3I7GG6XQu2M=
-----END CERTIFICATE-----