Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/04b033a2-3948-377c-8a21-b2f581e31d51.roa
File:                     04b033a2-3948-377c-8a21-b2f581e31d51.roa (raw, json)
Hash identifier:          A4ZGbCYIyOTnaWlLgeBmn26DXt927aHCuMY9VgRXPG0=
Subject key identifier:   0C:AE:6B:27:75:46:F6:8F:F1:89:05:8F:80:7C:A6:45:8C:45:9E:4D
Certificate issuer:       /CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
Certificate serial:       010D0C9F43285848F65BD4797621DB60385DC300
Authority key identifier: 75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/04b033a2-3948-377c-8a21-b2f581e31d51.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     0
IP address blocks:        2602:fd10:300::/40 maxlen: 48
Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:d4:79:76:21:db:60:38:5d:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ef79eb4-544e-4504-9a6f-d1ddff5bcd45
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=941b587d-be86-4f60-9cc7-5bfbe1798fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:63:6c:a2:b6:41:8c:4a:49:4f:0e:00:c3:
                    ad:a0:e2:46:53:78:83:15:57:e2:77:5d:73:e8:33:
                    50:a1:f7:e1:af:9c:da:18:8b:f9:c7:74:4b:3f:f9:
                    a6:0b:59:84:ec:f7:8d:15:4e:63:3e:fc:97:d9:3d:
                    12:ba:73:8e:ed:26:34:a3:1b:1e:55:2d:ac:e6:20:
                    5b:21:b9:5f:c8:5d:2e:93:1f:71:49:dc:24:5e:a3:
                    30:bd:c0:60:35:23:86:7d:9e:3b:e8:32:05:e0:9e:
                    2f:75:e4:35:31:ee:13:07:af:5a:0d:54:31:50:a8:
                    76:07:f8:bd:2e:c6:10:36:5f:cc:48:13:c5:ac:16:
                    60:f5:8a:75:74:64:e1:6d:c5:71:b4:8d:82:6f:51:
                    e3:af:41:31:4f:b1:01:7a:04:f3:b3:27:c1:e8:91:
                    52:1c:e8:81:75:c2:7e:93:ae:60:33:46:c9:ec:3f:
                    1d:41:87:49:1a:20:5e:dc:9d:15:8e:b3:79:61:2d:
                    ea:1b:78:a7:6f:09:56:a4:1b:fe:10:75:87:97:eb:
                    e5:9c:ce:d4:e0:f7:54:41:19:2c:c9:01:8f:83:99:
                    5e:0c:c6:fa:7b:db:bb:0e:1c:be:e0:c0:af:e1:27:
                    aa:9a:bf:f0:c1:7c:40:21:50:1e:2a:60:fa:4b:e2:
                    de:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AE:6B:27:75:46:F6:8F:F1:89:05:8F:80:7C:A6:45:8C:45:9E:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/04b033a2-3948-377c-8a21-b2f581e31d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.crl

            X509v3 Authority Key Identifier:
                keyid:75:B2:7A:F3:34:66:D4:62:06:FA:3F:26:9A:08:A2:A4:20:7D:D5:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ef79eb4-544e-4504-9a6f-d1ddff5bcd45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd10:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:c3:62:5f:c8:ba:28:20:d2:65:08:0a:41:b1:66:02:68:5b:
         18:5f:5a:90:c4:73:df:7b:75:d5:33:79:8f:1d:59:77:93:19:
         45:03:c3:c6:6b:6e:d9:5e:68:70:6c:17:ed:1c:b7:d7:d4:94:
         72:68:73:0f:f6:2d:f6:78:62:cf:38:71:ea:7e:e5:81:b6:82:
         5f:cf:b0:c4:ca:07:50:9b:87:b2:71:98:b1:10:71:05:86:98:
         eb:33:1d:27:cb:de:31:a3:58:b1:35:36:27:f4:6f:9a:ea:73:
         04:36:ad:1e:f5:45:42:39:3d:53:c2:d5:74:1b:d9:90:78:84:
         8f:5d:3e:5e:90:01:a2:34:13:5d:2d:b4:8e:12:bc:ec:53:ba:
         40:57:77:9d:3b:35:8d:08:a6:20:f6:c2:1f:f3:b3:9a:6f:00:
         40:bb:8c:0d:de:fa:75:fd:f3:9c:b5:31:50:ad:e3:e0:0a:76:
         fd:22:6a:45:67:50:8a:d5:80:cd:2a:3f:a0:a5:53:18:49:9c:
         92:db:c7:88:e3:62:1f:7c:c4:dd:91:5a:6e:77:61:5a:b1:7a:
         c5:55:fb:84:60:54:86:01:2d:2a:4d:3b:14:ce:03:d6:b4:20:
         31:55:10:c9:01:cd:27:4d:44:2c:12:cc:9f:fb:ec:90:7d:ce:
         d3:a9:78:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----