Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5e637f1-cec0-3845-8ee6-9a3a576eabe1.roa
File:                     f5e637f1-cec0-3845-8ee6-9a3a576eabe1.roa (raw, json)
Hash identifier:          NmqodW1PZwxHBNzbgnxR/lz8j5hKku+dG7VdlhXl+J4=
Subject key identifier:   7E:44:B6:47:C8:6F:0E:47:8E:9D:99:75:D1:64:29:3A:3A:ED:AE:E6
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583CF25480E104120C8BC9E0CB80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5e637f1-cec0-3845-8ee6-9a3a576eabe1.roa
Signing time:             Wed 16 Feb 2022 05:00:00 +0000
ROA not before:           Wed 16 Feb 2022 05:00:00 +0000
ROA not after:            Thu 16 Feb 2023 05:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:f2:54:80:e1:04:12:0c:8b:c9:e0:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Feb 16 05:00:00 2022 GMT
            Not After : Feb 16 05:00:00 2023 GMT
        Subject: CN=ab9be82a-d506-4d6f-bbf9-6d8bef24af64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6a:84:bc:ec:09:66:56:46:96:fb:6e:6d:14:
                    f3:1b:46:ef:48:90:d4:15:a4:48:45:5a:8c:cd:01:
                    69:6a:05:0d:bc:77:03:2d:40:80:ad:a0:af:af:e4:
                    cb:04:73:a4:1c:f4:be:1e:5c:8c:d1:52:3f:65:c6:
                    1b:9e:d7:e9:79:7c:16:e3:0e:f0:80:a2:18:83:13:
                    32:3e:4e:40:48:f2:c6:aa:4d:73:30:c1:01:35:8b:
                    68:63:0d:43:28:84:82:d3:77:17:14:ff:2c:2a:4b:
                    b7:ad:5b:f7:e0:8b:5c:c6:c9:6b:dc:14:ef:da:dd:
                    52:f6:1f:79:5e:5f:0e:e6:68:ed:5e:91:83:e8:e2:
                    28:c3:0b:a4:4f:1f:eb:54:ee:e5:ad:d3:96:59:d9:
                    f1:83:ea:47:c1:94:02:b4:80:d3:f5:ea:69:45:72:
                    be:b6:12:94:8d:42:43:64:ef:13:56:be:69:1d:52:
                    5f:85:9e:91:27:b3:7e:2b:b2:7c:37:19:e9:a5:c2:
                    32:b5:b0:97:f6:dd:db:c6:bb:16:de:a5:fb:25:2c:
                    30:01:e0:49:4d:42:a2:5b:26:1b:b4:b1:c5:53:55:
                    e1:ab:f2:25:91:19:d1:87:d9:16:47:9a:79:0c:bc:
                    97:6e:81:21:b5:97:18:81:dd:5c:16:08:9e:98:1d:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:44:B6:47:C8:6F:0E:47:8E:9D:99:75:D1:64:29:3A:3A:ED:AE:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5e637f1-cec0-3845-8ee6-9a3a576eabe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:95:b2:dd:78:a2:27:b0:2b:b6:9b:e7:36:a0:f5:1b:e6:9d:
         00:61:15:65:d1:ae:53:83:e3:1c:29:15:0d:e6:21:16:e2:d6:
         7e:39:88:c3:b7:30:8b:00:bd:c6:b7:80:92:4d:3f:24:9e:17:
         1a:d4:b8:b1:2c:39:87:92:be:8c:00:85:3d:e0:b5:e0:cc:76:
         06:83:7a:3f:d0:d2:93:42:67:2d:18:02:e9:eb:7b:8c:3f:2a:
         60:e6:1a:9f:97:72:52:06:ba:03:57:33:2e:a9:45:13:2d:0e:
         22:77:78:6e:0f:9d:a9:d0:15:85:98:2e:99:2c:c4:9d:63:3b:
         3a:45:dc:7a:61:98:fa:7a:3e:08:68:0d:fa:f5:3f:e6:1a:86:
         92:08:7c:a5:ea:2a:4d:0a:20:88:8a:8d:2a:6e:41:5b:5b:59:
         f3:2b:3a:f7:ef:fb:fb:b3:a8:7b:b5:44:fb:bf:1a:21:56:cc:
         57:02:e1:b6:ef:dc:00:d5:21:55:fb:18:2c:52:1f:7a:86:c8:
         16:0f:c9:7e:86:57:51:09:ab:4d:68:54:ee:d0:a6:33:08:9c:
         4c:20:99:63:c9:f8:89:2c:36:28:d4:c9:81:c4:dd:c9:d5:4c:
         eb:e6:85:61:52:a2:57:d2:d6:0d:74:24:d6:a8:e3:3a:b7:97:
         69:5f:d8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----