Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f1c79ce9-a907-38e7-8073-fac885033c0c.roa
File:                     f1c79ce9-a907-38e7-8073-fac885033c0c.roa (raw, json)
Hash identifier:          MkETYdVXneUKlZI7TrfEUsiRKndf1ZOq+xgAnHWgLDw=
Subject key identifier:   56:70:08:A9:94:B8:87:0D:2F:1E:89:A8:22:3A:4E:05:EF:BE:DD:21
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583FE3CDAE6A62EE069A560A2C00
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f1c79ce9-a907-38e7-8073-fac885033c0c.roa
Signing time:             Sat 12 Nov 2022 12:00:00 +0000
ROA not before:           Sat 12 Nov 2022 12:00:00 +0000
ROA not after:            Mon 13 Nov 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:e3:cd:ae:6a:62:ee:06:9a:56:0a:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Nov 12 12:00:00 2022 GMT
            Not After : Nov 13 05:00:00 2023 GMT
        Subject: CN=fee49b55-99be-4a69-aecc-6f3dd2e5fad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:d2:c5:36:3c:f9:49:d2:6b:91:91:cd:b7:
                    8a:a0:90:43:13:76:c7:ea:72:bb:97:49:54:8a:3f:
                    69:0d:9d:4e:00:f9:b2:25:ab:95:da:37:5e:0d:f5:
                    73:3d:85:f4:36:64:01:cd:9b:08:32:83:9b:40:62:
                    b6:02:b9:88:dc:ed:01:a2:1c:71:b5:b3:16:bd:11:
                    25:1b:75:bb:06:37:52:f4:e7:4c:a9:62:b9:fa:e9:
                    e7:0a:8f:91:eb:b8:e6:fc:c3:1f:9f:be:57:d5:6e:
                    9e:ce:1a:50:cf:a0:29:17:5f:94:40:4c:1c:86:15:
                    8f:8e:24:bc:71:1e:eb:39:fb:d1:af:8f:a7:d8:11:
                    fc:df:c8:56:45:dc:42:3c:70:2a:fd:eb:4b:8a:0d:
                    22:6d:3a:d6:d6:99:60:6c:3a:69:70:24:69:30:3c:
                    a7:06:41:64:34:67:d2:5c:d0:1b:74:61:dd:16:7f:
                    92:26:74:40:24:6a:4a:91:a7:77:7a:4a:e9:bd:e9:
                    02:30:fd:5a:35:8a:61:49:b2:db:e0:22:80:19:68:
                    47:de:87:e6:ca:e8:28:94:b6:c8:d6:31:94:cf:74:
                    7d:96:98:ea:a6:8e:16:c4:06:dc:8a:82:d7:49:61:
                    0d:e0:a0:99:e4:24:06:8d:32:a3:93:87:60:5d:23:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:70:08:A9:94:B8:87:0D:2F:1E:89:A8:22:3A:4E:05:EF:BE:DD:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f1c79ce9-a907-38e7-8073-fac885033c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:28:71:8e:2c:67:a4:c8:6c:63:78:c6:36:9b:48:f2:ec:7c:
         cf:52:c3:55:c6:31:39:8d:44:a3:be:8c:f6:30:62:af:cb:a2:
         3b:67:a0:68:f3:cd:ba:1a:95:1c:8b:74:28:c3:ce:75:d5:fa:
         12:b0:51:01:ec:2d:c2:b5:7b:9e:10:d3:ef:e2:51:1b:f9:a6:
         ea:b9:d8:6c:99:6d:cf:d4:1d:37:a7:ab:5a:50:0a:c3:f2:96:
         de:a9:54:f8:4a:fa:31:4e:18:52:0b:b8:31:24:50:99:dd:c8:
         bc:41:bd:4c:88:f9:f0:62:9f:7c:8d:c0:6f:df:fc:40:5b:7f:
         63:cc:80:92:96:5e:f6:eb:02:f0:8d:cb:5b:42:4d:a7:06:13:
         cf:56:b9:7d:ae:53:ad:c0:05:4e:93:e1:3c:c0:f3:d6:75:01:
         8b:61:bb:c1:84:88:44:fa:99:fe:0b:66:0a:7c:11:b4:d8:12:
         97:aa:3c:47:da:c0:86:0d:d2:0b:11:a6:f2:81:b0:d8:54:21:
         39:07:08:26:10:cd:5d:8c:e1:76:2c:4c:bb:88:29:ff:2a:69:
         5b:b7:89:d4:e1:a8:b6:55:80:4c:47:dd:d6:6b:ad:7c:4a:0e:
         41:db:ec:d2:08:8a:29:7f:b6:45:1c:1e:a5:aa:ea:68:e2:a5:
         aa:0c:15:c6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD/jza5qYu4GmlYKLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVhOGUzMjctZWJmNC00ZjRiLTkwNzMtOTBhY2Q2MTc5
N2NjMB4XDTIyMTExMjEyMDAwMFoXDTIzMTExMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZmVlNDliNTUtOTliZS00YTY5LWFlY2MtNmYzZGQyZTVmYWQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoDSxTY8+UnSa5GRzbeKoJBDE3bH6nK7l0lU
ij9pDZ1OAPmyJauV2jdeDfVzPYX0NmQBzZsIMoObQGK2ArmI3O0BohxxtbMWvREl
G3W7BjdS9OdMqWK5+unnCo+R67jm/MMfn75X1W6ezhpQz6ApF1+UQEwchhWPjiS8
cR7rOfvRr4+n2BH838hWRdxCPHAq/etLig0ibTrW1plgbDppcCRpMDynBkFkNGfS
XNAbdGHdFn+SJnRAJGpKkad3ekrpvekCMP1aNYphSbLb4CKAGWhH3ofmyugolLbI
1jGUz3R9lpjqpo4WxAbcioLXSWEN4KCZ5CQGjTKjk4dgXSPfBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFZwCKmUuIcNLx6JqCI6TgXvvt0hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4
ZTMyNy1lYmY0LTRmNGItOTA3My05MGFjZDYxNzk3Y2MvZjFjNzljZTktYTkwNy0z
OGU3LTgwNzMtZmFjODg1MDMzYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjVhOGUzMjctZWJmNC00ZjRiLTkw
NzMtOTBhY2Q2MTc5N2NjL2Y1YThlMzI3LWViZjQtNGY0Yi05MDczLTkwYWNkNjE3
OTdjYy5jcmwwHwYDVR0jBBgwFoAURYZl4q8eZIkQSjuD49h/SJO1e5MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNWE4ZTMyNy1lYmY0LTRmNGItOTA3My05MGFj
ZDYxNzk3Y2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAnmAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFEocY4sZ6TIbGN4xjabSPLsfM9Sw1XGMTmNRKO+jPYwYq/Lojtn
oGjzzboalRyLdCjDznXV+hKwUQHsLcK1e54Q0+/iURv5puq52GyZbc/UHTenq1pQ
CsPylt6pVPhK+jFOGFILuDEkUJndyLxBvUyI+fBin3yNwG/f/EBbf2PMgJKWXvbr
AvCNy1tCTacGE89WuX2uU63ABU6T4TzA89Z1AYthu8GEiET6mf4LZgp8EbTYEpeq
PEfawIYN0gsRpvKBsNhUITkHCCYQzV2M4XYsTLuIKf8qaVu3idThqLZVgExH3dZr
rXxKDkHb7NIIiil/tkUcHqWq6mjipaoMFcY=
-----END CERTIFICATE-----