Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e336b009-7ee3-3ec9-a766-a72d8abfedd7.roa
File:                     e336b009-7ee3-3ec9-a766-a72d8abfedd7.roa (raw, json)
Hash identifier:          vCdyCKCXk7yiNAbt3DSBco7HidX7GAABYhGJg1UeBK8=
Subject key identifier:   4A:93:67:12:3E:1E:D4:06:D7:72:15:4B:26:0E:A2:3C:D5:60:A1:1B
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583CD376D8A88C23D18B02213300
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e336b009-7ee3-3ec9-a766-a72d8abfedd7.roa
Signing time:             Sat 05 Feb 2022 05:00:00 +0000
ROA not before:           Sat 05 Feb 2022 05:00:00 +0000
ROA not after:            Sun 05 Feb 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:d3:76:d8:a8:8c:23:d1:8b:02:21:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Feb  5 05:00:00 2022 GMT
            Not After : Feb  5 05:00:00 2023 GMT
        Subject: CN=075906a6-9f41-4b2d-bcb4-af461d7f5e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:50:83:58:29:77:51:22:8b:ac:a0:e1:88:
                    4e:61:8b:f6:6d:5a:9b:dd:71:0d:05:1c:25:26:cd:
                    bd:8b:12:d9:f1:88:c2:27:84:54:63:17:b6:0f:05:
                    13:97:b8:53:e6:78:9f:80:8a:d3:9d:64:a3:02:db:
                    f2:24:8e:90:59:ba:7c:b3:4d:4a:ff:15:bb:0e:c6:
                    d2:3a:e3:c2:ce:6b:a1:3a:a8:ab:1d:f9:1b:d4:70:
                    a3:bc:d2:4c:7e:bc:2d:5c:d5:ef:2d:f5:da:e3:54:
                    ce:67:eb:89:8c:9f:e8:11:4b:4f:10:88:3d:08:2f:
                    90:cd:62:f3:7f:73:a7:23:73:76:99:f2:fc:a4:23:
                    e2:ff:c3:7e:a3:7c:b6:ad:5f:0c:ce:f6:9c:7e:35:
                    6c:04:c4:73:49:1a:d8:50:44:84:d6:b5:30:86:57:
                    cd:5d:64:96:2e:c4:2e:c9:e2:93:09:60:42:0d:e7:
                    f8:be:26:5f:e9:f5:8d:10:9e:35:7a:41:52:14:e6:
                    25:ac:a7:cf:2b:63:94:99:48:c9:28:5f:82:9c:9c:
                    99:df:7a:e9:4b:d2:b6:d3:c0:12:c2:ae:86:7a:ac:
                    43:d0:41:26:55:06:d4:96:44:ec:e4:af:74:37:20:
                    57:74:fd:be:72:d4:d7:ce:9f:09:ef:cd:ea:b9:70:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:93:67:12:3E:1E:D4:06:D7:72:15:4B:26:0E:A2:3C:D5:60:A1:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e336b009-7ee3-3ec9-a766-a72d8abfedd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:6c:cf:a3:15:a7:83:dc:0b:f7:d6:5b:f7:8c:95:4f:04:db:
         a7:4a:90:ae:ba:0a:44:8e:f0:80:82:8d:86:82:7f:ce:58:48:
         1b:c0:af:61:da:2a:79:94:1a:82:bc:b5:38:3a:54:a2:c5:77:
         55:c5:4d:4c:1a:85:9f:dd:4d:49:36:b3:e4:e9:30:12:b7:b6:
         06:17:ec:34:47:61:cd:c7:15:e9:f5:34:75:75:db:5e:d3:86:
         e4:b1:68:aa:32:77:9e:48:f4:3a:03:0b:7e:02:be:7f:2e:1a:
         3a:85:3a:71:18:18:3b:cc:24:6d:f2:00:cd:35:0b:60:25:53:
         d1:ee:6e:3e:f3:4d:9f:8e:9b:17:56:c5:da:2c:86:7c:ea:e7:
         2d:97:c2:15:ad:1e:0c:aa:7a:86:e6:9c:16:a0:f4:da:13:cf:
         e2:b1:cc:2b:b1:bb:b4:7b:59:d0:e7:8c:3b:f1:06:7e:c4:54:
         32:c1:a8:2f:3a:f4:6d:6b:d0:8c:e9:2d:16:7d:8f:2a:e8:cf:
         94:f3:7c:5a:2a:d2:1b:1a:2b:a5:84:00:c3:31:12:59:a3:61:
         44:f7:44:e9:7a:c7:15:ac:01:5e:1e:b0:7a:97:5a:0f:74:96:
         20:44:65:c6:1d:34:ed:0b:a5:5d:a8:d7:c8:92:74:14:8f:33:
         23:1e:ed:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org