Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d5f08787-a7b3-33ae-b74b-b7d76a9c5e3d.roa
File:                     d5f08787-a7b3-33ae-b74b-b7d76a9c5e3d.roa (raw, json)
Hash identifier:          5EVxTA6HqQBthFkW9a19AP6dFY0bzkSIs//CCwE5M+E=
Subject key identifier:   60:FE:58:85:C1:C6:9B:DE:01:C5:A4:82:6E:88:C6:45:26:10:77:2C
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583EADA929DCACF89F000438AEC0
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d5f08787-a7b3-33ae-b74b-b7d76a9c5e3d.roa
Signing time:             Sun 24 Jul 2022 12:00:00 +0000
ROA not before:           Sun 24 Jul 2022 12:00:00 +0000
ROA not after:            Tue 25 Jul 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ad:a9:29:dc:ac:f8:9f:00:04:38:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jul 24 12:00:00 2022 GMT
            Not After : Jul 25 04:00:00 2023 GMT
        Subject: CN=5696bee1-9cee-4616-bd40-a3862de8336e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:f9:da:36:a6:f0:e8:24:c1:14:33:ca:ab:
                    18:8e:92:58:56:06:7e:66:76:ca:8f:7c:76:6d:1e:
                    91:01:63:3e:28:a9:11:0c:52:9a:a3:a5:6e:65:d3:
                    33:3c:80:31:e9:64:68:14:c1:9d:58:42:be:be:8f:
                    84:79:37:ec:1a:da:b3:8e:dd:32:56:5a:c6:b1:3a:
                    f8:47:1f:89:fe:84:63:b2:64:9e:d9:8f:4e:17:61:
                    fc:af:6c:f7:1c:11:ec:31:82:bf:ed:e0:43:2a:e6:
                    9d:11:b9:22:c1:30:56:0f:a9:28:44:f5:e8:63:72:
                    fa:24:6d:47:5a:7e:cf:68:bf:c0:75:01:d0:09:2f:
                    5b:c1:02:37:c4:dd:3f:08:5a:65:3a:30:38:b4:5c:
                    ab:de:d5:6c:b5:8e:4e:9d:46:08:61:cb:3a:47:d5:
                    fc:92:dd:03:ba:df:3d:a1:bf:ed:56:16:ae:ab:15:
                    bd:67:ce:f9:ef:83:a4:3e:59:bc:c7:3d:6b:53:13:
                    28:37:b5:55:a4:b5:9b:64:34:96:c1:48:1b:e7:7c:
                    6b:ee:65:2f:02:ad:e6:dc:3a:45:09:50:ff:dd:d4:
                    41:31:22:5d:c2:c9:fa:1c:53:9a:f2:2e:ae:33:e2:
                    9e:51:94:19:e4:dd:c5:b8:9e:ea:8e:9d:0f:bf:bd:
                    6a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FE:58:85:C1:C6:9B:DE:01:C5:A4:82:6E:88:C6:45:26:10:77:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d5f08787-a7b3-33ae-b74b-b7d76a9c5e3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d5:cd:d1:ce:86:a8:e2:54:be:a4:83:41:72:a5:31:10:45:
         66:98:01:92:b6:f0:76:02:03:82:70:e1:19:33:a2:68:1d:e1:
         94:08:ab:00:7d:3e:df:64:59:52:9d:0d:ca:f6:1c:2f:72:e0:
         a8:65:18:7c:10:00:ae:90:45:b5:e3:15:3c:2c:6d:61:3b:69:
         29:2e:d4:0c:a7:d0:50:97:d3:70:d4:03:6c:10:a3:bf:1a:57:
         1b:dc:55:7d:ae:28:b9:49:fd:35:a3:f5:c9:1d:75:83:0c:94:
         05:a9:a2:1e:65:a2:56:42:a7:5f:a1:89:cc:f8:ab:44:5f:b8:
         ef:cb:62:88:50:29:33:1c:0a:52:4c:7f:e0:41:a6:24:3d:9c:
         9a:65:89:69:f6:41:02:4d:03:bd:12:cd:a2:90:07:df:dc:7e:
         5b:da:83:cb:1f:97:c0:35:14:2f:85:52:06:62:db:4d:2c:5a:
         41:38:79:40:c4:5c:af:9d:e9:bf:45:60:09:85:51:eb:a3:da:
         7b:de:c8:e5:2c:17:aa:dd:5a:57:ca:55:13:64:8f:d5:ba:1c:
         ae:70:b7:83:d1:6d:9e:4e:a2:a4:45:31:1e:51:88:99:02:2d:
         15:bb:81:a9:34:28:8a:3f:9d:ca:76:47:21:ae:63:b4:54:5f:
         4b:bb:c8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----