Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bdb68177-b04e-3a22-9b85-6a09b3b92760.roa
File:                     bdb68177-b04e-3a22-9b85-6a09b3b92760.roa (raw, json)
Hash identifier:          +kpPZeNqrLcQ6bljuXWf5o1bvWUx6L+YVqBkrrOhddQ=
Subject key identifier:   7A:1F:6E:69:D8:2E:78:14:D0:C4:B7:A5:45:28:BD:19:F0:7B:DD:A7
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583E2AD0567A35E5240C96B64200
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bdb68177-b04e-3a22-9b85-6a09b3b92760.roa
Signing time:             Tue 07 Jun 2022 12:00:00 +0000
ROA not before:           Tue 07 Jun 2022 12:00:00 +0000
ROA not after:            Thu 08 Jun 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:2a:d0:56:7a:35:e5:24:0c:96:b6:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jun  7 12:00:00 2022 GMT
            Not After : Jun  8 04:00:00 2023 GMT
        Subject: CN=fefc1588-eb37-4171-baf8-ef71b84c23a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1b:eb:41:4a:b2:a8:63:7d:e3:77:62:49:dd:
                    e9:09:11:0f:9f:74:2c:6a:cf:11:29:ad:e3:4c:0e:
                    62:c4:3b:33:7b:a2:86:71:8c:ea:62:e5:d2:18:af:
                    98:06:c7:cd:04:a2:d1:58:1c:93:53:f5:b5:56:08:
                    ca:8a:2a:0c:b3:3a:ae:29:e8:d9:99:3e:b4:f0:37:
                    e2:8a:32:cf:d3:df:08:9d:57:7d:c9:11:d1:3d:5f:
                    cd:2b:c2:43:6f:80:d4:45:88:52:7d:03:9e:74:b1:
                    15:08:94:ac:b0:f2:96:b7:17:47:23:95:8b:08:37:
                    77:27:d7:f2:79:23:46:6b:0b:61:ec:0c:28:fb:03:
                    f6:47:87:68:c5:17:14:7c:1a:0a:6a:21:17:d4:d6:
                    ca:ab:9c:39:ee:83:8c:bf:0d:39:b3:5b:c8:93:62:
                    f5:cf:1d:37:3e:2b:3a:c3:52:47:ee:b1:22:12:11:
                    b1:ba:73:45:dd:98:27:b8:99:44:73:f5:d1:5f:f5:
                    09:91:cd:d9:42:0d:47:cc:15:29:d1:46:11:d8:77:
                    0c:f0:ef:6d:20:40:93:fb:18:be:70:f7:59:04:3d:
                    f0:7f:3d:29:93:67:54:c4:a1:7e:89:8f:24:b5:2d:
                    e4:52:25:6c:ff:28:fa:c4:d9:8e:26:9b:f1:33:95:
                    04:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1F:6E:69:D8:2E:78:14:D0:C4:B7:A5:45:28:BD:19:F0:7B:DD:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/bdb68177-b04e-3a22-9b85-6a09b3b92760.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:61:46:90:85:09:c4:21:98:9b:5e:fc:55:09:06:77:20:0e:
         9a:0b:30:46:b3:1e:c1:fe:33:ab:ed:46:eb:00:72:d9:44:42:
         8c:05:d5:b0:fa:0a:9a:44:02:bf:5d:d1:30:2f:39:1c:97:8d:
         d4:b9:62:45:38:77:ef:55:f9:5d:ba:a7:62:3b:a9:22:55:81:
         9d:3b:61:73:b9:48:97:5b:f8:ec:0f:f1:e4:28:8f:a4:53:42:
         36:93:b3:4c:c8:95:22:3e:ab:59:b3:fb:17:d0:c9:c3:5e:78:
         39:2c:4a:3f:2a:48:c7:0e:8e:44:ac:55:71:33:f0:2a:46:50:
         be:b0:23:01:04:2e:3b:07:41:f9:a4:e3:e5:24:74:c9:d4:cf:
         8e:43:d3:50:47:59:15:17:32:f9:fc:33:76:d2:45:cd:e2:00:
         f0:cf:96:44:e7:3f:07:53:92:83:4b:d1:93:a3:35:67:37:60:
         1c:26:1a:6a:24:96:43:12:e1:e9:87:f9:e1:93:82:06:d9:2f:
         9f:20:eb:ba:29:29:be:f3:5d:4e:92:45:4e:4e:d0:85:16:e5:
         6b:09:f2:36:cc:76:6d:5f:f8:c8:b9:31:2e:c6:b3:f4:63:19:
         59:68:6d:85:99:de:a7:3b:1f:35:96:c1:2e:24:82:5f:ae:63:
         97:c0:48:03
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD4q0FZ6NeUkDJa2QgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMDYwNzEyMDAwMFoXDTIzMDYwODA0MDAwMFowLzEtMCsGA1UEAxMk
ZmVmYzE1ODgtZWIzNy00MTcxLWJhZjgtZWY3MWI4NGMyM2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihvrQUqyqGN943diSd3pCREPn3Qsas8RKa3j
TA5ixDsze6KGcYzqYuXSGK+YBsfNBKLRWByTU/W1VgjKiioMszquKejZmT608Dfi
ijLP098InVd9yRHRPV/NK8JDb4DURYhSfQOedLEVCJSssPKWtxdHI5WLCDd3J9fy
eSNGawth7Awo+wP2R4doxRcUfBoKaiEX1NbKq5w57oOMvw05s1vIk2L1zx03Pis6
w1JH7rEiEhGxunNF3ZgnuJlEc/XRX/UJkc3ZQg1HzBUp0UYR2HcM8O9tIECT+xi+
cPdZBD3wfz0pk2dUxKF+iY8ktS3kUiVs/yj6xNmOJpvxM5UE6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHofbmnYLngU0MS3pUUovRnwe92nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvYmRiNjgxNzctYjA0ZS0z
YTIyLTliODUtNmEwOWIzYjkyNzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFFhRpCFCcQhmJte/FUJBncgDpoLMEazHsH+M6vtRusActlEQowF
1bD6CppEAr9d0TAvORyXjdS5YkU4d+9V+V26p2I7qSJVgZ07YXO5SJdb+OwP8eQo
j6RTQjaTs0zIlSI+q1mz+xfQycNeeDksSj8qSMcOjkSsVXEz8CpGUL6wIwEELjsH
Qfmk4+UkdMnUz45D01BHWRUXMvn8M3bSRc3iAPDPlkTnPwdTkoNL0ZOjNWc3YBwm
GmoklkMS4emH+eGTggbZL58g67opKb7zXU6SRU5O0IUW5WsJ8jbMdm1f+Mi5MS7G
s/RjGVlobYWZ3qc7HzWWwS4kgl+uY5fASAM=
-----END CERTIFICATE-----