Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b25232f1-ab5d-38e5-8af6-7f8beb9c3ba4.roa
File:                     b25232f1-ab5d-38e5-8af6-7f8beb9c3ba4.roa (raw, json)
Hash identifier:          LAIAADwmUcXvxpxJRp2iuv6DbdndVbN/QXgCe1e3a3Y=
Subject key identifier:   5F:D7:9A:8E:83:F4:F0:4E:A3:0B:08:2A:D5:D0:4A:59:8B:88:AF:9A
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583E51C29C220273DAEE17DBF280
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b25232f1-ab5d-38e5-8af6-7f8beb9c3ba4.roa
Signing time:             Tue 21 Jun 2022 12:00:00 +0000
ROA not before:           Tue 21 Jun 2022 12:00:00 +0000
ROA not after:            Thu 22 Jun 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:51:c2:9c:22:02:73:da:ee:17:db:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jun 21 12:00:00 2022 GMT
            Not After : Jun 22 04:00:00 2023 GMT
        Subject: CN=eecbeb0d-9ddd-40fd-b1bb-f3706313cb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:bf:b9:a8:a4:86:c0:3b:a8:33:a4:65:d1:
                    d5:fc:e2:25:d8:c6:30:e7:01:eb:1f:ab:29:17:05:
                    fa:50:1a:e5:c7:1b:84:2a:ff:13:cb:fa:a8:dc:bc:
                    ef:79:98:49:cb:93:11:1e:32:61:82:35:db:1c:86:
                    08:b0:f1:c5:b9:a0:33:04:4e:bc:e0:b0:a2:b9:8f:
                    e6:ce:e6:6d:27:f5:98:d2:c6:48:32:78:80:8c:ce:
                    24:96:19:ee:34:a6:b2:3e:3b:6f:35:62:fd:36:51:
                    f8:5e:03:e7:83:ce:87:80:c2:7d:3f:6b:1f:e8:1e:
                    a0:6d:b7:bc:10:e2:10:cc:c5:59:42:62:84:95:6e:
                    5b:be:a6:4b:e8:e7:16:1e:10:b4:15:8e:cf:62:10:
                    28:cb:0e:13:55:49:ca:c6:0f:1d:6e:91:f1:c8:26:
                    1c:2d:ae:b8:79:0b:48:6e:5d:91:91:fb:af:25:ee:
                    76:4c:95:9a:9e:a8:ad:e7:2e:b6:e1:5c:33:8e:29:
                    66:60:42:0b:4a:47:8e:48:2a:29:4b:29:c7:41:c3:
                    37:47:7f:23:3d:eb:d7:9c:4e:7a:7e:bc:b9:a2:74:
                    c8:f5:13:80:e1:42:db:d6:f8:b6:12:c1:2f:7b:24:
                    3b:de:e6:c2:90:70:d6:9f:a0:a1:39:95:d0:3b:6d:
                    c1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D7:9A:8E:83:F4:F0:4E:A3:0B:08:2A:D5:D0:4A:59:8B:88:AF:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b25232f1-ab5d-38e5-8af6-7f8beb9c3ba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b5:c7:d4:74:fd:aa:04:f1:74:87:10:f7:df:08:5f:cd:be:
         87:0f:c4:2f:ba:9b:79:d9:40:70:d9:6a:8d:00:f0:86:0a:dc:
         eb:cc:b8:8e:4b:92:62:94:b7:7f:e8:81:08:da:b0:c5:bd:15:
         7c:09:05:7b:a4:a1:13:42:cd:0b:51:1a:4f:67:6d:66:c8:91:
         fe:83:3e:4a:99:20:94:7b:72:47:c0:9b:e2:f5:ea:60:e4:bd:
         a4:5f:11:8d:66:78:df:78:c8:d2:74:f2:c9:79:86:6a:22:7a:
         39:f9:57:64:ae:d2:6a:b1:cc:48:f9:3a:48:d0:f3:33:7e:42:
         61:b3:e7:ef:c0:9a:10:bd:a7:1c:7f:75:49:da:89:04:9b:e9:
         26:14:93:86:9a:43:5f:e6:58:ae:3a:33:a1:2d:0b:e1:ea:c5:
         a7:31:03:11:ff:ff:55:4d:f7:9d:ab:30:98:e6:9d:54:f2:b8:
         54:8a:a9:e1:99:cd:0e:d8:ae:b7:4e:80:36:c3:36:4b:0f:63:
         ee:78:fa:fa:79:c3:23:9f:1d:aa:1a:68:9f:2a:98:6f:ac:e5:
         34:a7:13:da:fd:ff:a3:85:c3:18:3b:1c:52:20:15:c3:98:d7:
         95:f0:08:4c:90:c9:c0:da:eb:0c:24:66:df:c0:5c:9d:8e:de:
         10:dd:22:05
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD5RwpwiAnPa7hfb8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDYyMTEyMDAwMFoXDTIzMDYyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZWVjYmViMGQtOWRkZC00MGZkLWIxYmItZjM3MDYzMTNjYjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygi/uaikhsA7qDOkZdHV/OIl2MYw5wHrH6sp
FwX6UBrlxxuEKv8Ty/qo3LzveZhJy5MRHjJhgjXbHIYIsPHFuaAzBE684LCiuY/m
zuZtJ/WY0sZIMniAjM4klhnuNKayPjtvNWL9NlH4XgPng86HgMJ9P2sf6B6gbbe8
EOIQzMVZQmKElW5bvqZL6OcWHhC0FY7PYhAoyw4TVUnKxg8dbpHxyCYcLa64eQtI
bl2RkfuvJe52TJWanqit5y624VwzjilmYEILSkeOSCopSynHQcM3R38jPevXnE56
fry5onTI9ROA4ULb1vi2EsEveyQ73ubCkHDWn6ChOZXQO23BHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF/Xmo6D9PBOowsIKtXQSlmLiK+aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvYjI1MjMyZjEtYWI1ZC0z
OGU1LThhZjYtN2Y4YmViOWMzYmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFK1x9R0/aoE8XSHEPffCF/NvocPxC+6m3nZQHDZao0A8IYK3OvM
uI5LkmKUt3/ogQjasMW9FXwJBXukoRNCzQtRGk9nbWbIkf6DPkqZIJR7ckfAm+L1
6mDkvaRfEY1meN94yNJ08sl5hmoiejn5V2Su0mqxzEj5OkjQ8zN+QmGz5+/AmhC9
pxx/dUnaiQSb6SYUk4aaQ1/mWK46M6EtC+HqxacxAxH//1VN952rMJjmnVTyuFSK
qeGZzQ7YrrdOgDbDNksPY+54+vp5wyOfHaoaaJ8qmG+s5TSnE9r9/6OFwxg7HFIg
FcOY15XwCEyQycDa6wwkZt/AXJ2O3hDdIgU=
-----END CERTIFICATE-----