Error: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer: RFC 3779 resource not subset of parent's resources

Autonomous System Provider Authorization

$ rpki-client -vvvf rpki.avsisp.com/repo/AVSISP/2/AS23507.asa
File:                     AS23507.asa (raw, json)
Hash identifier:          v/RWbdTT7nyOVk/zonhrJK5jXGXmKVfUU+sBs7PHTig=
Subject key identifier:   D3:95:82:83:D1:8B:FC:D2:C6:EF:D9:26:3D:FD:59:D5:8B:58:60:25
Certificate issuer:       /CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
Certificate serial:       0F8946039A6008F1ED2614F179DB97B8B7F6614F
Authority key identifier: 3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/2/AS23507.asa
Signing time:             Wed 31 Dec 2025 10:12:04 +0000
ASPA not before:          Wed 31 Dec 2025 10:07:04 +0000
ASPA not after:           Wed 30 Dec 2026 10:12:04 +0000
Customer ASID:            23507
Providers:                AS: 1002
                          AS: 20473
                          AS: 204044
                          AS: 205941
                          AS: 210464
                          AS: 213669
                          AS: 213683
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:89:46:03:9a:60:08:f1:ed:26:14:f1:79:db:97:b8:b7:f6:61:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
        Validity
            Not Before: Dec 31 10:07:04 2025 GMT
            Not After : Dec 30 10:12:04 2026 GMT
        Subject: CN=D3958283D18BFCD2C6EFD9263DFD59D58B586025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:ca:9f:5c:eb:b7:07:b7:8a:09:ef:6d:23:
                    9b:1b:fb:a1:44:bb:38:fa:f4:5e:ef:2e:29:0e:4a:
                    a7:e9:92:86:90:19:b8:da:f7:c5:92:b3:be:94:db:
                    3f:fa:b0:cc:74:50:c3:e4:2a:1b:22:f7:ba:2f:5a:
                    e0:1d:fb:b2:72:74:60:db:b2:2c:12:1b:e4:10:6a:
                    e0:19:da:e0:47:8b:01:f6:49:3b:0d:04:3b:44:b7:
                    e2:b4:12:a0:40:ec:40:66:d3:55:4b:d8:30:d3:01:
                    1a:ea:3b:6c:50:40:ac:35:b8:53:4d:0b:ce:4a:34:
                    10:03:6c:0c:48:27:8b:1c:e2:77:ea:36:c6:fb:35:
                    e7:0d:19:92:6f:dd:58:ee:91:0e:8f:6d:b0:26:b2:
                    5e:d0:58:12:74:9e:65:f5:c8:01:59:04:37:60:e9:
                    ec:81:f0:bc:8b:cd:4a:54:79:ba:e2:cb:c4:0a:0e:
                    10:c6:74:6f:00:fe:3a:57:39:01:d4:96:82:f5:6c:
                    c9:e7:ac:27:14:e0:f2:d9:8f:63:73:01:7d:01:67:
                    3c:43:40:53:bc:e8:5c:cd:e0:e2:32:6f:bd:e5:f5:
                    04:83:24:c8:67:2e:c8:c7:9d:28:8d:c2:e0:ca:0f:
                    7e:08:74:72:d3:31:8e:47:34:cf:97:5d:4c:f8:65:
                    c0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:95:82:83:D1:8B:FC:D2:C6:EF:D9:26:3D:FD:59:D5:8B:58:60:25
            X509v3 Authority Key Identifier:
                keyid:3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/2/AS23507.asa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23507

    Signature Algorithm: sha256WithRSAEncryption
         82:63:50:a5:7c:27:bc:f2:bf:91:32:19:b8:ca:3f:41:84:a6:
         fc:d4:e5:bf:20:d2:a6:a8:25:a2:16:f0:eb:43:91:49:b5:f6:
         2a:21:bc:fa:63:a8:c6:00:82:21:3c:6d:8f:a8:4a:e5:c6:ce:
         01:aa:cd:23:21:e8:cf:74:d7:ce:36:09:97:d5:f2:96:d1:9d:
         42:df:ae:ee:c5:18:7e:c2:90:f5:6e:a9:2b:69:69:3f:33:94:
         d1:6f:a4:be:61:d5:3a:14:b8:d4:3b:07:45:08:55:37:41:bf:
         04:04:46:9b:f8:bd:7e:a8:e8:a2:e2:dd:f1:a7:6c:c2:65:9a:
         bb:13:c1:21:f4:90:3d:74:fd:77:9b:b4:fe:a2:dd:6b:8e:7a:
         0a:48:a1:6f:4d:3b:b0:cf:e0:6a:1d:80:4d:17:43:b5:39:af:
         0f:c7:79:84:6d:ba:0a:9f:16:aa:67:fd:e5:f6:21:d1:b3:89:
         31:32:00:4d:e2:11:ed:4f:72:dc:05:dc:5f:1c:ca:1d:57:7f:
         8d:f7:56:e4:48:17:c2:db:bb:6b:15:8d:86:5a:16:6b:07:12:
         29:a9:df:fa:1c:b3:ca:1a:33:bb:0e:6e:7a:d2:3b:e5:c6:e7:
         69:eb:51:4d:bd:5f:a9:d4:5d:a6:ae:08:d9:1b:be:6e:16:fb:
         06:6f:29:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:32:06 2026 by rpki-client