Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d9f5851d-f36e-3076-819f-7f7a25e99131.roa
File:                     d9f5851d-f36e-3076-819f-7f7a25e99131.roa (raw, json)
Hash identifier:          ARXRyaqqGOySfvGMatbsD+7bigNyqMudPoy6ln7nars=
Subject key identifier:   A7:4D:76:0B:DA:79:0C:42:76:58:63:E9:5D:4C:AF:35:E6:92:2B:3B
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583DED7B6FEC502125A63F013400
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d9f5851d-f36e-3076-819f-7f7a25e99131.roa
Signing time:             Mon 16 May 2022 12:00:00 +0000
ROA not before:           Mon 16 May 2022 12:00:00 +0000
ROA not after:            Wed 17 May 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ed:7b:6f:ec:50:21:25:a6:3f:01:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: May 16 12:00:00 2022 GMT
            Not After : May 17 04:00:00 2023 GMT
        Subject: CN=7d81986b-ac8f-4aea-8c2c-9587256cdae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:a1:36:a8:d3:34:b6:93:d2:0c:51:b5:c4:
                    5b:3a:d6:74:46:c1:bb:fb:97:37:73:cd:92:29:35:
                    12:35:19:59:a9:1d:f5:d7:56:6d:f8:0a:92:45:b9:
                    b3:d5:5c:02:55:cf:3e:5a:a5:f4:a5:20:17:7a:cd:
                    ed:dc:f6:5d:18:90:0c:2e:19:03:4d:21:22:36:9e:
                    3d:5e:d2:80:b0:98:df:e9:a9:a6:29:6b:c2:bb:c7:
                    0f:a5:c7:e9:c1:05:7a:61:7f:77:27:d5:23:20:c8:
                    b5:2c:ff:04:f9:09:b6:e6:ab:5f:9a:50:61:cb:2d:
                    fc:c6:60:5a:3a:61:c8:62:98:29:7b:25:f0:7d:29:
                    f4:c3:9c:02:ef:55:82:59:59:1a:49:12:d8:84:e2:
                    30:b5:48:be:42:34:be:0f:e6:76:de:ca:97:03:57:
                    fe:0a:5e:aa:0a:5b:68:ee:c7:d8:d3:9d:0e:30:67:
                    e8:38:6b:30:62:56:f5:54:72:74:6f:d1:41:ed:a6:
                    3c:76:25:1f:af:cb:8d:ea:74:44:77:92:b4:ba:c7:
                    6a:04:3b:59:36:9c:ec:05:e0:77:82:d4:6a:cc:00:
                    a4:91:6c:8e:13:f0:ff:39:c4:ca:47:c0:dc:d6:2a:
                    65:3c:fb:35:dc:6c:e6:1c:5a:f8:82:1f:e1:f7:6d:
                    0a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4D:76:0B:DA:79:0C:42:76:58:63:E9:5D:4C:AF:35:E6:92:2B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/d9f5851d-f36e-3076-819f-7f7a25e99131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e0:bf:a3:ec:08:7a:e1:5b:59:2c:03:a3:3e:e6:b3:29:54:
         c0:ef:00:b9:2c:43:ef:17:0f:99:14:14:83:02:41:21:9e:ca:
         66:55:be:56:56:f1:d8:1f:4c:b9:21:d1:49:3e:e3:58:67:b9:
         f9:0a:80:62:57:0c:97:b2:18:3f:fc:6b:50:63:46:bd:9c:b7:
         53:bb:83:7d:be:62:61:da:66:87:57:5a:d5:3f:22:f0:73:d1:
         65:c9:46:e8:e3:48:9d:96:21:c4:2f:a9:ca:6f:82:07:6c:7b:
         e7:28:0c:79:1f:42:4d:3a:89:7c:81:6a:16:2c:0d:cd:a7:c3:
         f5:25:e9:6a:e9:fe:37:b3:78:44:11:32:52:fc:66:35:8e:82:
         c2:38:9d:19:56:81:81:8e:52:ae:45:3b:43:cd:a6:c0:91:e0:
         38:4c:15:db:7d:f2:5b:81:86:94:b4:20:01:65:1a:f1:6f:ff:
         c8:62:29:47:ac:f3:ef:b1:6b:b0:44:da:e8:56:43:45:7e:05:
         da:32:1a:a8:89:20:5a:43:5c:39:89:d2:62:fa:e4:52:d5:e8:
         c4:81:f0:65:fa:16:94:44:b3:31:61:2e:f7:f1:cf:f5:df:b8:
         d5:4b:86:cd:e4:ee:d1:8c:76:b7:f9:81:f4:e7:e4:4d:3d:10:
         3f:ee:83:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----