Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ef01b1ef-8617-3c76-a5d8-93059f9286b0.roa
File:                     ef01b1ef-8617-3c76-a5d8-93059f9286b0.roa (raw, json)
Hash identifier:          vYWeRjoMYBN43m/e+RSkZg3Tsv3SR72jyWCN/0P/PCk=
Subject key identifier:   D9:0E:6D:48:0B:87:98:A9:6D:C2:0D:D2:56:F3:C6:50:19:20:73:E6
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583F4F70929C4833AE81C5211630
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ef01b1ef-8617-3c76-a5d8-93059f9286b0.roa
Signing time:             Tue 20 Sep 2022 12:00:00 +0000
ROA not before:           Tue 20 Sep 2022 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4f:70:92:9c:48:33:ae:81:c5:21:16:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Sep 20 12:00:00 2022 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=94f0feb0-4730-47f6-bac1-1eaf2cc97e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:26:e7:bb:77:67:f2:95:3d:84:84:29:e5:
                    2a:22:e5:52:db:1c:ca:d7:d5:e6:e7:cc:69:0a:96:
                    bd:27:e4:59:71:e5:2f:02:ef:83:f3:74:fb:f2:f7:
                    0a:e1:07:31:61:cd:1e:a3:78:a1:8f:c4:1c:44:70:
                    e4:fe:41:71:ec:a6:a4:d6:e8:60:86:66:28:0c:62:
                    60:08:4a:43:c2:c1:af:05:b6:b5:6b:3e:fb:c0:29:
                    24:47:e9:04:70:cd:ba:77:f3:99:c7:5c:1a:68:ef:
                    39:b6:76:2b:43:0d:e9:1c:53:e7:d4:f5:40:a2:ca:
                    f0:e7:64:9b:85:bb:3d:61:f3:47:a2:5b:45:f4:b0:
                    c0:0f:e5:82:e9:e4:54:56:e1:64:59:eb:9e:24:c6:
                    98:b3:87:09:39:94:9a:f5:c5:1c:a0:1b:81:cf:81:
                    d0:2f:9b:f8:c0:50:dc:01:86:1f:90:f2:e9:2d:1b:
                    f9:54:c5:47:76:89:9b:1a:e5:25:c8:45:56:63:b9:
                    8d:fb:3f:32:5c:47:ab:3b:fa:40:98:27:91:6b:7b:
                    ea:2b:36:a2:e5:fa:a9:42:e5:ff:41:e0:e6:76:58:
                    f3:95:8a:f3:33:bb:ec:ff:24:5d:4b:ec:86:05:e2:
                    91:21:9d:1c:cd:8a:e6:71:c2:1d:a6:c4:8b:4a:e1:
                    62:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0E:6D:48:0B:87:98:A9:6D:C2:0D:D2:56:F3:C6:50:19:20:73:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/ef01b1ef-8617-3c76-a5d8-93059f9286b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:86:ed:9f:07:41:bf:9d:a7:40:96:7f:a7:11:e9:6c:6f:c3:
         54:f5:7c:61:e4:c3:f0:ea:55:e5:14:d6:6b:0b:e7:f2:3f:0f:
         4d:6a:be:f8:2d:6e:19:d0:7c:ce:01:8a:60:e8:c5:92:c5:e3:
         35:c5:b7:6c:11:7a:87:5d:d0:43:f8:69:f0:0e:85:a2:b1:46:
         27:29:be:4d:45:e9:7a:39:45:81:e8:ce:46:67:25:f2:09:60:
         1a:ee:1f:62:13:a4:39:bc:80:e1:a1:82:32:32:49:98:dd:55:
         6a:b5:7b:83:4e:82:41:6e:02:04:b9:c1:a8:79:2f:c4:c5:dd:
         37:02:85:38:44:64:30:82:c8:29:15:e7:47:8d:d3:c3:f4:31:
         ff:5c:20:c7:1e:9b:41:6c:73:3b:ff:be:80:14:18:46:78:e9:
         a0:c7:be:91:f9:61:b2:5f:1c:73:ca:99:ac:06:6f:48:fd:43:
         cd:84:40:64:0f:0f:0c:90:77:33:a3:07:39:f2:48:8c:77:b9:
         46:30:79:25:02:7c:ba:ce:9a:eb:89:ec:de:72:ae:68:fa:e2:
         de:e9:e2:be:18:f5:5a:75:cc:fa:be:2b:7c:ba:a1:bf:c8:72:
         4a:f0:73:7d:5d:78:e5:2c:97:2e:31:d4:8f:43:53:cc:3a:39:
         10:04:d5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----