Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b762003d-8f73-3054-b0ee-4344b5408166.roa
File:                     b762003d-8f73-3054-b0ee-4344b5408166.roa (raw, json)
Hash identifier:          B4WPOik159CgsKKHvxhVS35u6zuWvYu4DHlckF7rnZE=
Subject key identifier:   B4:9F:61:87:A8:70:2D:7B:1F:25:0A:72:22:DC:4F:F9:40:DC:BD:9C
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583FE0B2CCE86C7CACF4C50578A0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b762003d-8f73-3054-b0ee-4344b5408166.roa
Signing time:             Fri 11 Nov 2022 12:00:00 +0000
ROA not before:           Fri 11 Nov 2022 12:00:00 +0000
ROA not after:            Sun 12 Nov 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e0:b2:cc:e8:6c:7c:ac:f4:c5:05:78:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Nov 11 12:00:00 2022 GMT
            Not After : Nov 12 05:00:00 2023 GMT
        Subject: CN=f5357a96-ca69-4cb2-82a9-63bf454ef8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:57:81:fb:c2:77:70:4c:28:c7:e6:cb:3d:3a:
                    72:ea:00:45:a3:3f:29:9b:03:e2:04:8b:f6:d2:1b:
                    15:82:18:04:fe:97:f0:27:98:d1:9b:07:dd:ea:5b:
                    5d:5e:7a:fa:5b:47:ba:d5:c8:7f:5f:17:9e:61:97:
                    c6:38:ed:e2:b9:48:45:3e:c5:85:19:ba:58:58:60:
                    2b:00:8d:d4:64:9c:80:c3:75:50:0e:4d:b7:e5:d8:
                    e9:4a:5c:7e:59:11:f5:31:c2:73:81:8f:30:12:37:
                    54:85:83:3e:e9:da:82:21:3e:61:4c:50:94:d1:f7:
                    00:87:96:58:e4:6b:fb:ae:f8:91:c9:9b:ec:01:1f:
                    bd:d4:51:0b:e6:82:cc:90:1b:0f:29:0e:2c:28:02:
                    84:14:98:f0:ff:16:4e:57:f9:b8:4b:f3:18:a9:b7:
                    c5:8f:40:22:2d:64:6e:6f:af:15:ce:72:09:60:02:
                    ed:bf:19:ba:a4:91:3e:f8:67:1b:bd:54:5d:34:58:
                    70:8e:dd:b6:52:8f:68:7a:0f:81:af:4e:ec:26:e9:
                    64:ef:50:a5:2f:6e:3b:55:28:53:b0:42:c1:dd:32:
                    f3:38:ef:cf:a9:ac:2e:b0:b9:49:cf:5d:05:f5:c3:
                    48:75:e4:4a:5a:b8:26:7a:18:99:10:90:df:8c:5f:
                    70:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9F:61:87:A8:70:2D:7B:1F:25:0A:72:22:DC:4F:F9:40:DC:BD:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/b762003d-8f73-3054-b0ee-4344b5408166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:31:13:b5:67:5e:e5:85:e5:d6:c2:ab:1d:7c:e8:b0:35:85:
         8a:b3:6c:e9:1e:8d:0a:23:99:18:ce:41:0c:1f:8e:0b:8a:e1:
         e0:99:12:29:34:f3:30:88:cd:47:90:e3:39:76:31:a8:52:85:
         75:cc:4e:c0:92:8c:c9:71:8d:9b:31:05:17:96:7b:91:da:34:
         06:53:e6:60:41:2c:79:a8:70:40:ce:39:db:7b:bc:b4:b6:dc:
         9a:2c:a6:57:ca:f7:6c:2a:f7:bd:4b:52:d8:50:03:a5:9c:e4:
         f7:e0:4a:fb:2e:5a:27:0e:ff:b3:77:13:10:6b:cd:60:bb:c4:
         b3:b8:63:7f:24:94:d6:37:6a:ae:07:2a:86:e5:dd:48:76:3e:
         ce:37:80:97:8d:49:a3:86:b6:4d:23:1e:73:97:7c:58:5a:c1:
         83:75:63:24:13:c4:7e:e4:b9:3c:3f:93:65:b3:23:36:fb:ef:
         4f:6e:7d:92:4e:98:75:f6:fb:93:15:31:70:ab:98:d8:85:10:
         68:2f:ba:1d:82:d8:00:1c:f9:07:f5:dd:76:f6:19:16:54:3d:
         d7:e0:28:7f:01:76:af:65:4f:b5:e1:48:be:45:1b:99:69:c8:
         97:1c:6b:b1:d8:0f:3f:7d:1e:4f:ff:8b:70:f9:41:9f:97:a0:
         40:ea:8c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----