Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d15259c4-b7ec-3f42-a1c9-8a9057522aad.roa
File:                     d15259c4-b7ec-3f42-a1c9-8a9057522aad.roa (raw, json)
Hash identifier:          E6OwHiumJFDrAVYePvaEcnqJ7gvGbIET/zgKcj9HD08=
Subject key identifier:   10:33:CB:42:11:BE:C3:31:2B:B4:5E:73:14:62:FE:07:B9:30:8B:46
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583EFF1972A333A2BAC3C16EA6E8
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d15259c4-b7ec-3f42-a1c9-8a9057522aad.roa
Signing time:             Mon 22 Aug 2022 12:00:00 +0000
ROA not before:           Mon 22 Aug 2022 12:00:00 +0000
ROA not after:            Wed 23 Aug 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ff:19:72:a3:33:a2:ba:c3:c1:6e:a6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Aug 22 12:00:00 2022 GMT
            Not After : Aug 23 04:00:00 2023 GMT
        Subject: CN=0b878435-0ea4-4300-a42d-e795290ad116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:18:75:7c:09:5f:22:93:b7:0d:5b:ff:56:ed:
                    ce:54:ef:cf:33:a1:d3:f5:36:6e:f2:09:8d:d7:0c:
                    96:5c:81:7f:d1:1f:99:48:5b:41:f6:95:65:9b:af:
                    c8:63:97:57:42:25:b6:b2:ac:f9:77:7f:a7:7b:1b:
                    eb:ab:9b:05:b5:09:09:fd:70:25:4b:bb:e0:ce:13:
                    dd:25:9a:14:8f:df:a1:5e:ef:11:c3:e2:52:c3:91:
                    67:30:9e:8e:b8:65:82:a4:47:80:88:ce:79:dd:7a:
                    e3:10:96:d4:d7:1e:ab:0e:46:b9:51:b3:8e:64:57:
                    22:62:5b:cd:e8:4f:e0:59:ae:e6:a2:71:c4:94:d1:
                    7c:6d:11:aa:03:46:f6:5d:8c:50:d5:2e:83:01:49:
                    fb:98:97:1b:24:03:15:f0:19:0e:6e:8a:82:9e:e6:
                    32:18:fd:6a:7a:d4:20:13:67:28:0b:eb:40:8c:c3:
                    8f:55:52:56:00:58:82:79:a9:fe:fa:98:0e:72:77:
                    30:06:55:e4:85:a5:14:6c:23:f0:ab:40:4c:82:9e:
                    8a:2f:01:e3:ff:93:72:75:a0:85:74:dc:30:3d:b5:
                    bf:a2:28:13:19:5e:47:56:3e:77:90:e6:64:d5:ec:
                    5b:0f:d5:6e:76:41:ac:9d:da:96:ef:1c:f2:7f:c1:
                    2e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:33:CB:42:11:BE:C3:31:2B:B4:5E:73:14:62:FE:07:B9:30:8B:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d15259c4-b7ec-3f42-a1c9-8a9057522aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:6a:d9:3d:ae:da:b4:2b:2d:6a:19:f8:01:c7:88:3b:47:9d:
         b1:f6:e6:6c:ed:bd:55:00:c0:ee:49:47:8b:aa:0c:ec:08:85:
         7c:8f:3c:c3:69:7f:1b:05:ae:3b:5b:b5:01:a3:12:13:5d:31:
         25:e2:70:1c:41:a6:07:67:22:82:a5:1a:76:db:4e:b1:a5:00:
         85:5f:6d:01:27:ae:82:6d:d9:7e:b8:a4:bd:3a:09:ff:21:7b:
         28:5d:bc:32:c0:bc:04:75:fe:fa:21:7e:e9:f8:38:32:2b:ae:
         61:bd:fa:e3:c5:6c:bf:d2:e3:d5:86:64:37:f8:1f:fb:f5:0a:
         ef:4b:28:e4:65:b5:ee:14:6a:8d:62:48:34:c6:dd:cb:9b:ee:
         8d:6c:ed:84:f6:c0:06:df:90:94:81:3a:fe:37:86:a9:80:e9:
         e0:70:4d:5c:47:82:45:8e:81:83:a0:a2:72:b0:88:9c:4f:98:
         e0:1e:05:ce:b3:93:d1:c9:08:96:c7:7e:2b:d1:7b:19:16:cf:
         5d:c3:4f:50:ef:88:10:ac:f0:7f:0c:56:f9:28:98:60:8f:3b:
         4c:76:be:07:ae:92:2a:bc:fd:96:de:c7:ab:b8:20:37:1a:f5:
         86:3a:7c:22:74:8c:58:17:44:e6:12:69:b8:53:dd:b6:76:2b:
         e1:93:a0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----