Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d5f163ad-e623-37e3-a7ee-80177d48016f.roa
File:                     d5f163ad-e623-37e3-a7ee-80177d48016f.roa (raw, json)
Hash identifier:          H8p4Nf6z/LgBkoLfL7ZR74qRN82PskRACw6FD9jjKlU=
Subject key identifier:   F8:11:1E:D8:DA:AB:C8:61:F2:9B:98:2A:D4:71:D9:7F:F9:25:04:B4
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583D0534FB09328C09C63B10B380
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d5f163ad-e623-37e3-a7ee-80177d48016f.roa
Signing time:             Wed 23 Feb 2022 05:00:00 +0000
ROA not before:           Wed 23 Feb 2022 05:00:00 +0000
ROA not after:            Thu 23 Feb 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:05:34:fb:09:32:8c:09:c6:3b:10:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Feb 23 05:00:00 2022 GMT
            Not After : Feb 23 05:00:00 2023 GMT
        Subject: CN=bd484f4b-4603-41fb-9916-ec4aabc71da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:85:78:40:40:96:a2:6e:1d:31:f3:60:fb:65:
                    f5:00:b2:4e:fd:97:8c:de:e7:64:db:c1:e0:14:3e:
                    ef:92:5a:61:5e:36:b6:db:70:8f:a9:e8:3d:18:74:
                    87:5b:10:2f:2a:85:88:a1:67:e5:65:ad:a1:f7:d0:
                    af:c0:2a:19:dd:6b:ff:df:81:6a:57:ea:bf:e6:97:
                    a0:70:4f:7d:0e:a8:89:95:ca:4a:87:2c:26:17:9f:
                    6b:7c:d8:4a:a8:7e:6a:f5:f2:01:45:3e:a5:20:a1:
                    59:47:f9:08:ba:3c:95:94:2a:b0:83:3a:8c:93:d9:
                    1a:01:37:54:a3:af:6c:b8:e3:25:14:3c:14:10:bd:
                    75:d9:b1:3b:5d:b4:b3:3e:83:dd:68:00:e9:44:13:
                    bb:d5:12:dd:21:fd:d0:71:dd:c3:8a:23:7b:25:39:
                    23:e0:e7:e6:c6:c5:b5:5e:bc:e3:f9:b3:85:8f:00:
                    7b:e1:07:9d:70:77:de:b6:63:85:32:c8:fc:42:e2:
                    c4:6b:40:b3:f3:12:f1:c4:4c:dd:11:c9:fd:9a:7e:
                    b3:79:1b:81:4f:74:15:06:96:dc:c9:55:60:2f:4d:
                    a2:09:78:10:f2:32:39:7c:2d:f8:71:8e:cc:21:fa:
                    8f:be:69:e2:47:a9:be:8d:1d:d6:e9:17:32:da:22:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:11:1E:D8:DA:AB:C8:61:F2:9B:98:2A:D4:71:D9:7F:F9:25:04:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d5f163ad-e623-37e3-a7ee-80177d48016f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:19:ba:f4:04:f6:e7:8d:33:eb:ef:f5:0e:d7:d3:9a:84:14:
         a4:8b:3f:6c:e6:1d:0a:93:1c:8a:2b:8b:16:7b:fe:7c:4a:bb:
         0f:97:9d:86:fd:ac:2b:cc:63:67:6b:eb:47:94:8c:51:55:6a:
         89:18:d6:ee:ac:9e:0d:d5:1e:a7:d9:7c:45:64:d8:01:26:16:
         1e:dd:38:e5:82:cf:08:b6:9d:48:9d:db:31:0e:0e:7f:19:36:
         5b:bb:8e:af:e1:65:e4:1e:e5:78:fc:e3:10:22:76:63:da:02:
         34:dc:c8:39:33:98:b3:5d:d2:2e:28:71:33:c6:58:d9:de:a8:
         e2:f9:f7:02:f8:b9:ec:75:01:2b:ff:4f:87:fb:9c:8d:cc:8d:
         22:36:38:da:75:e4:3f:4b:b2:c7:cf:4f:7c:c1:7f:9d:80:e1:
         64:bc:81:1b:8a:ee:78:34:76:db:09:d3:d5:51:63:04:d2:2e:
         53:bf:69:52:ab:2e:3a:3a:37:0f:1a:b3:41:6b:bd:91:21:26:
         25:7a:f6:a4:7d:32:b6:a3:d1:f1:8a:14:be:ab:88:5a:f8:97:
         48:2d:99:55:83:04:0e:bb:ce:95:b5:11:b6:8f:12:a0:c9:f9:
         fd:c8:30:9f:1a:7f:a4:68:f7:7f:ec:33:a5:54:7f:3a:b5:05:
         2e:74:bc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----