Error: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer: RFC 3779 resource not subset of parent's resources

Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.avsisp.com/repo/AVSISP/2/AS23506.asa
File:                     AS23506.asa (raw, json)
Hash identifier:          +Swhs0dvNXbQOIWhjohnG/I6uEZBe5qdHfcMaFYt30g=
Subject key identifier:   29:15:16:58:1F:CE:AE:BF:12:7E:E4:21:51:50:DC:BA:5B:D1:35:02
Certificate issuer:       /CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
Certificate serial:       1FBC0824CB371254758D6F32301F290A3EC4DEAB
Authority key identifier: 3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/2/AS23506.asa
Signing time:             Wed 31 Dec 2025 10:12:04 +0000
ASPA not before:          Wed 31 Dec 2025 10:07:04 +0000
ASPA not after:           Wed 30 Dec 2026 10:12:04 +0000
Customer ASID:            23506
Providers:                AS: 0
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bc:08:24:cb:37:12:54:75:8d:6f:32:30:1f:29:0a:3e:c4:de:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
        Validity
            Not Before: Dec 31 10:07:04 2025 GMT
            Not After : Dec 30 10:12:04 2026 GMT
        Subject: CN=291516581FCEAEBF127EE4215150DCBA5BD13502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b1:29:5b:33:f8:37:58:26:09:93:1c:39:46:
                    eb:15:f5:43:c3:d3:6a:17:82:cb:1d:eb:dd:99:bc:
                    04:e3:e3:d5:ec:b9:d0:cb:91:b2:67:61:85:57:7d:
                    1b:af:71:cc:a0:35:a0:ba:f2:96:05:c8:69:21:93:
                    ad:07:56:1f:4b:99:09:b2:d2:2a:3b:02:bc:d5:9f:
                    98:82:0e:e2:55:c3:f6:9c:7d:23:b1:4e:47:e4:53:
                    a0:67:e4:7c:71:b4:e6:49:bd:5c:32:cf:96:74:71:
                    56:b4:81:e3:af:f0:17:71:d3:ef:2d:64:06:f2:9b:
                    d2:45:3b:0a:e2:9c:b3:30:75:1d:c4:d2:25:82:2e:
                    d5:d6:38:92:b2:7b:92:d7:e0:eb:0b:eb:ca:ed:84:
                    9d:48:03:c7:31:bb:d4:3d:42:d3:8e:2f:f8:a8:80:
                    f6:a9:4c:fd:66:29:7e:2c:f3:dc:e8:0e:b1:2d:4f:
                    63:b6:c6:85:46:8c:e1:f6:90:c2:a8:a3:cf:e3:1f:
                    2d:90:45:01:19:a6:84:eb:80:31:f2:67:59:f4:4e:
                    27:0b:ec:0e:fa:e6:25:c5:66:ef:ca:fd:bd:d3:87:
                    76:89:4e:3e:c4:70:38:64:0c:0b:59:93:18:fe:73:
                    54:23:86:42:cf:a5:a5:bb:15:34:71:77:a8:9d:ee:
                    a7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:15:16:58:1F:CE:AE:BF:12:7E:E4:21:51:50:DC:BA:5B:D1:35:02
            X509v3 Authority Key Identifier:
                keyid:3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/2/AS23506.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23506

    Signature Algorithm: sha256WithRSAEncryption
         a9:69:3d:04:9a:fd:79:8b:4a:78:91:cf:a7:84:f7:ff:14:20:
         df:3b:ce:da:62:b9:df:d8:8f:f2:20:42:44:8c:0b:cf:35:26:
         ee:5f:66:d0:70:ff:b7:d5:8a:f7:14:8f:58:e6:37:95:05:2e:
         7f:b4:e5:61:9b:96:09:2c:48:b1:c3:60:eb:22:3f:13:fc:1e:
         ef:68:be:b4:e8:5b:66:2b:72:09:d0:35:35:1e:53:10:63:98:
         75:35:55:ae:05:64:38:34:f3:ef:34:e3:60:b6:48:bf:b0:22:
         6d:ca:d8:41:57:04:fe:bc:28:6d:7f:52:1f:fa:72:ea:5e:92:
         cb:40:7e:56:6b:d4:64:92:9e:cb:49:e3:12:ed:97:30:0a:21:
         a5:13:95:e3:fd:7e:29:9e:f0:5e:27:9c:bd:95:f7:0f:a9:86:
         b1:49:5c:bb:b7:53:ff:51:1b:70:f5:b2:75:de:d3:25:31:7f:
         4b:3f:98:d9:50:70:f9:c4:6b:b9:14:0f:0f:6f:25:f7:7b:7a:
         98:df:4c:9c:45:67:de:c7:f5:23:cc:25:ae:35:ba:56:04:83:
         6b:b8:18:cf:cf:7c:70:5e:ba:6d:f9:04:57:11:c6:94:8a:af:
         65:4b:35:f3:75:d5:b9:d0:21:8f:65:d3:b1:1e:4e:39:63:f9:
         6f:8c:83:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:05:48 2026 by rpki-client