Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d89dc94f-de8e-3ef8-941e-020b4c72695a.roa
File:                     d89dc94f-de8e-3ef8-941e-020b4c72695a.roa (raw, json)
Hash identifier:          Jgz2L+hiGabFre6h5ncqL75Wj6nlfLoycJlBTsYXh4Q=
Subject key identifier:   38:A5:74:B8:F6:5F:2F:7B:7F:E9:45:D9:18:43:18:69:5F:40:2D:0F
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583CC22E9EBD550CA63353466C80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d89dc94f-de8e-3ef8-941e-020b4c72695a.roa
Signing time:             Sun 30 Jan 2022 05:00:00 +0000
ROA not before:           Sun 30 Jan 2022 05:00:00 +0000
ROA not after:            Mon 30 Jan 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:c2:2e:9e:bd:55:0c:a6:33:53:46:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jan 30 05:00:00 2022 GMT
            Not After : Jan 30 05:00:00 2023 GMT
        Subject: CN=b3ddcca7-2a6e-4e58-86eb-cb57a64deeaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:5a:ca:ec:4b:50:3d:29:45:3b:2b:01:ed:
                    1f:66:fb:f2:8d:90:7d:7c:96:41:5d:de:92:1a:a8:
                    57:88:ae:a8:32:48:9f:7a:76:23:55:89:18:d8:cc:
                    84:83:5e:2b:8c:86:84:e4:9a:f2:78:82:f6:ad:7c:
                    0b:37:e9:bd:e1:87:fe:85:4d:df:6b:1b:d7:a0:25:
                    14:1a:ac:04:fa:2c:a8:98:00:1e:c0:51:3e:24:2a:
                    2f:7e:0c:b4:7b:f4:80:06:6c:fd:a8:33:e5:fa:cf:
                    50:d4:bf:91:23:03:f3:4e:0c:c1:d6:0b:1b:65:47:
                    b2:dd:c9:d2:9e:30:a5:4b:64:96:61:bc:d7:78:2c:
                    71:4a:f6:f2:50:23:f8:a0:89:48:b5:6f:b7:64:22:
                    83:4a:0b:b8:5b:b1:ff:69:94:2f:50:92:31:d8:1d:
                    f9:fa:39:94:ee:bf:ea:6a:7e:33:c9:be:42:ef:86:
                    67:cc:85:28:2b:43:14:0d:d3:6b:a8:f5:71:52:73:
                    03:1f:ee:48:31:4c:6b:ab:29:71:cf:78:28:31:95:
                    dc:6c:0e:c0:bd:e4:46:8e:d0:e4:73:68:2a:dc:b0:
                    8c:83:9e:c6:c8:e4:36:44:69:18:7c:fd:24:2d:ec:
                    d6:6a:be:1e:6e:22:5f:ee:06:e7:42:c5:36:1c:5b:
                    11:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A5:74:B8:F6:5F:2F:7B:7F:E9:45:D9:18:43:18:69:5F:40:2D:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d89dc94f-de8e-3ef8-941e-020b4c72695a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ec:81:c5:ab:c3:c7:d2:f0:33:0e:1b:2f:ba:14:f0:5a:78:
         3f:4b:77:04:22:7f:5c:5a:98:19:df:ea:88:0b:dc:17:b0:76:
         ab:bd:20:a9:ff:fd:ff:43:d8:f4:a6:b5:86:f7:74:64:a9:bf:
         d3:c7:53:62:cf:30:09:dc:bf:77:f8:be:4b:38:ba:f4:cb:68:
         a8:f2:43:b9:c8:6d:8c:fd:eb:66:86:7a:82:9c:03:01:dc:15:
         bf:b3:41:4e:34:27:8c:49:bb:d2:21:0f:c1:e8:c4:04:c5:e6:
         ca:1f:33:c0:38:ea:78:5f:46:f7:78:d3:a2:37:bd:17:45:47:
         81:ca:ba:a7:a2:0d:d6:74:d9:44:0e:cf:7a:18:1e:fb:9b:6d:
         19:d4:c6:84:14:54:9b:9f:35:23:10:27:e6:a8:c3:34:4e:9a:
         dc:8c:04:de:87:64:c4:68:32:e3:b7:a8:d7:33:9a:6b:e1:47:
         19:0b:bc:f5:ca:c4:41:00:c0:7d:e8:81:48:ee:0d:16:da:a0:
         e5:6b:e6:2a:d9:9b:e9:f1:93:0c:f3:bb:43:48:b6:3a:80:aa:
         e0:25:f1:ca:28:f4:ac:01:cf:d9:bb:ff:29:32:66:e8:88:ec:
         9c:70:12:6e:97:41:5b:96:67:2a:83:55:68:b6:9e:3e:d9:78:
         72:99:e7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----