Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e969bcd2-c5c6-3c32-b8c0-fb635289b388.roa
File:                     e969bcd2-c5c6-3c32-b8c0-fb635289b388.roa (raw, json)
Hash identifier:          uIdRYe5Me8D6Yf5d+TOoK4w6TAiO2wxevbGutbZE4mA=
Subject key identifier:   72:7A:D6:2E:97:51:14:7A:E3:12:9C:9D:99:89:3E:23:AB:8B:52:78
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583FD59E5A90D8A9D0D7DEE5F940
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e969bcd2-c5c6-3c32-b8c0-fb635289b388.roa
Signing time:             Mon 07 Nov 2022 12:00:00 +0000
ROA not before:           Mon 07 Nov 2022 12:00:00 +0000
ROA not after:            Wed 08 Nov 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d5:9e:5a:90:d8:a9:d0:d7:de:e5:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Nov  7 12:00:00 2022 GMT
            Not After : Nov  8 05:00:00 2023 GMT
        Subject: CN=36be9971-2c39-49ca-82be-5312cc460879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1f:72:9e:69:9d:17:95:3d:2e:e5:41:9a:65:
                    18:ed:82:87:0f:2a:57:db:57:7a:b3:80:57:d4:93:
                    f6:46:e9:94:ac:79:36:80:10:07:5b:70:fc:a4:94:
                    d4:17:55:f5:d9:f3:22:50:68:84:b9:30:f6:79:44:
                    ef:63:7c:9b:a1:ff:29:9f:8f:d8:b6:77:3d:a7:52:
                    fa:8e:43:cb:9e:54:5e:93:bc:a5:16:84:fe:39:db:
                    1f:d3:c2:72:cd:19:14:68:b5:e4:51:22:c7:b3:c9:
                    29:5f:7e:61:0e:ae:bf:07:28:13:df:aa:d5:d8:2e:
                    33:16:57:ce:23:df:bc:88:9f:6a:98:85:40:8e:ef:
                    5d:9b:76:57:ea:dd:80:fa:44:16:47:a3:9d:5e:d2:
                    84:ab:19:d0:18:2c:79:6f:61:d3:97:cf:b0:34:14:
                    e7:f7:53:df:9c:4f:45:0a:91:bf:82:95:0c:32:54:
                    f9:ae:08:a0:fc:5a:83:18:7a:19:3f:88:ec:a2:9b:
                    e1:55:25:4a:99:2e:59:6e:88:67:1b:d6:df:33:18:
                    8f:ef:56:25:41:b9:89:09:89:1d:31:13:41:96:99:
                    42:88:39:4d:0c:ec:74:d6:c4:ac:4d:fb:cb:f7:c0:
                    08:93:a9:9b:b5:35:9c:7c:f0:1c:51:70:f2:d6:8d:
                    4d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7A:D6:2E:97:51:14:7A:E3:12:9C:9D:99:89:3E:23:AB:8B:52:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/e969bcd2-c5c6-3c32-b8c0-fb635289b388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:71:26:65:25:8a:6b:e8:d4:08:ec:03:ad:e5:a4:40:0d:a4:
         0f:0c:f2:50:ae:ed:71:0b:ac:bd:31:ea:b0:c4:33:21:96:d3:
         bf:40:47:ce:df:fe:ab:da:d8:00:00:91:b9:4a:7d:0d:fa:83:
         77:2e:29:36:fc:5a:a0:a7:91:59:e8:01:d5:83:34:40:9c:83:
         04:2f:79:05:2f:1d:f3:3a:1c:85:b3:4e:73:ea:8c:23:ee:b1:
         71:8b:9d:11:7a:e5:81:7e:5d:63:c2:bd:40:e5:35:67:38:47:
         1c:ed:7f:46:6c:4a:54:bf:44:45:fe:18:bf:75:c2:af:d9:ff:
         f4:bc:70:c2:73:16:d3:54:23:cb:8f:d0:79:55:1b:61:00:9f:
         90:54:51:53:fc:6e:0b:79:20:93:bd:65:eb:2d:7d:62:4b:dc:
         c2:dd:a8:98:f3:47:8c:e7:4a:5a:d0:e8:d9:55:ac:2f:cb:77:
         1c:24:f2:50:af:3b:6d:09:78:90:41:28:48:57:76:d3:94:26:
         64:03:f9:9d:27:f3:cc:cb:fa:26:42:c5:27:6a:a9:b3:b3:4b:
         f8:68:12:14:ba:21:f6:6d:c8:0e:9e:3a:b0:f9:02:58:39:b3:
         7e:32:ba:26:31:2c:fb:df:db:c6:f1:4c:05:e8:34:41:ab:75:
         99:ee:50:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----