Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fe20eb12-11de-306b-a707-5d8f36aa2798.roa
File:                     fe20eb12-11de-306b-a707-5d8f36aa2798.roa (raw, json)
Hash identifier:          ZofOA1sP0T6CA3DIDJzcTji+1wWHL1OtpXE4thr9oPQ=
Subject key identifier:   53:FF:A0:0B:A5:2F:2F:85:19:64:F0:75:4C:D6:CA:33:08:7A:32:26
Certificate issuer:       /CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
Certificate serial:       010D0C9F4328583E94EC361D0C4BB2C4A5C01B80
Authority key identifier: 45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fe20eb12-11de-306b-a707-5d8f36aa2798.roa
Signing time:             Fri 15 Jul 2022 12:00:00 +0000
ROA not before:           Fri 15 Jul 2022 12:00:00 +0000
ROA not after:            Sun 16 Jul 2023 04:00:00 +0000
asID:                     3970
IP address blocks:        2620:9e:6001::/48 maxlen: 48

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:94:ec:36:1d:0c:4b:b2:c4:a5:c0:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a8e327-ebf4-4f4b-9073-90acd61797cc
        Validity
            Not Before: Jul 15 12:00:00 2022 GMT
            Not After : Jul 16 04:00:00 2023 GMT
        Subject: CN=8d0b3fd1-6395-41b6-af60-8629021af276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:3e:fd:e5:51:ad:9b:a6:65:de:e3:c1:ad:
                    22:f7:22:4d:d0:bb:3c:7f:3e:cd:6c:3e:e1:32:9e:
                    f4:4c:11:a9:ae:0d:f2:1f:17:93:8b:0f:f6:b0:69:
                    15:a9:57:2b:ec:bd:51:ed:bc:c4:6d:ad:a1:ec:95:
                    31:f1:88:5e:66:84:8e:39:ec:e1:e9:5e:92:c6:9d:
                    60:af:90:cb:08:03:84:78:b0:af:73:f0:9f:32:e3:
                    4d:ee:9d:56:f6:10:c8:c5:f9:d8:ba:a9:93:33:54:
                    fd:0f:26:22:e3:a2:f1:d8:cc:24:7c:63:3f:f3:04:
                    5c:4b:90:bb:ba:c7:83:69:21:de:10:0b:a3:3f:37:
                    fb:7e:8f:a5:84:d7:bf:bc:55:e5:05:61:ec:1d:27:
                    d0:91:3c:b9:2c:56:4a:e8:31:5d:9f:4a:81:4b:cb:
                    b8:74:91:25:6f:23:48:05:ba:85:b8:33:0a:98:e5:
                    a2:f3:e6:ed:3f:b6:a3:71:8b:15:74:54:53:7e:dd:
                    7f:47:9b:26:c1:34:db:3c:50:80:55:28:4c:f4:53:
                    93:75:21:cd:b2:66:7b:46:5d:7c:1b:f4:fc:c6:11:
                    11:c9:40:5f:b1:9e:9a:17:db:b2:cd:48:c5:c7:43:
                    78:49:52:46:6c:81:fd:57:82:eb:f4:eb:59:4c:cd:
                    71:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FF:A0:0B:A5:2F:2F:85:19:64:F0:75:4C:D6:CA:33:08:7A:32:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/fe20eb12-11de-306b-a707-5d8f36aa2798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc/f5a8e327-ebf4-4f4b-9073-90acd61797cc.crl

            X509v3 Authority Key Identifier:
                keyid:45:86:65:E2:AF:1E:64:89:10:4A:3B:83:E3:D8:7F:48:93:B5:7B:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f5a8e327-ebf4-4f4b-9073-90acd61797cc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:9e:6001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:6b:5e:26:80:38:be:c0:2c:52:e8:ec:df:70:41:e2:e8:13:
         92:7b:bb:e8:63:10:f1:4f:9d:c8:50:ac:55:8f:d4:25:0a:26:
         ad:a3:09:d7:04:72:03:d1:b2:c2:0f:ee:69:57:69:ab:c2:cd:
         d4:1c:d9:1e:26:94:7f:9a:80:3f:8d:ae:7d:46:5b:f7:53:4c:
         90:95:13:e8:3c:3d:0e:7a:c7:ef:f8:42:cd:2f:51:3d:ce:19:
         bb:98:1f:f0:88:01:3a:e5:85:6d:e7:1c:6f:e6:6e:e9:4a:15:
         3b:ed:7c:54:9d:1f:fa:73:fc:0c:cb:ee:08:71:2c:9b:16:24:
         d6:64:ae:a5:df:18:be:e3:f2:70:2b:4e:9b:03:bc:ae:13:b3:
         3e:71:3c:97:7a:a1:a5:c6:65:b1:02:13:2d:63:64:31:55:dc:
         aa:a2:08:64:d6:77:da:29:f2:d9:c6:eb:55:97:b4:49:ee:7b:
         bb:e7:27:94:56:59:cc:67:13:12:fc:ba:ec:4d:06:53:4e:f9:
         ed:4a:27:c2:c4:80:86:57:e6:8c:bb:57:6f:e8:56:96:72:11:
         79:32:08:f4:e0:26:90:d0:37:5a:ea:29:40:b4:a9:61:a8:87:
         df:60:ac:6e:f1:a7:76:19:b1:92:4f:51:82:dd:e4:9a:df:c4:
         b4:ad:f1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----