Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/D94Ce6SI-RmWfU_zWR6kbX3RndM.roa
File:                     D94Ce6SI-RmWfU_zWR6kbX3RndM.roa (raw, json)
Hash identifier:          tBAMhyXIr5Zuarz1dnDOvcqQ6PbqIwufyo9G2YQT728=
Subject key identifier:   0F:DE:02:7B:A4:88:F9:19:96:7D:4F:F3:59:1E:A4:6D:7D:D1:9D:D3
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       FDF1B3
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/D94Ce6SI-RmWfU_zWR6kbX3RndM.roa
Signing time:             Sat 01 Jan 2022 13:01:00 +0000
ROA not before:           Sat 01 Jan 2022 13:01:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204790
IP address blocks:        2a10:2480::/29 maxlen: 29

Validation:               Failed, RFC 3779 resource not subset of parent's resources

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16642483 (0xfdf1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Jan  1 13:01:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0fde027ba488f919967d4ff3591ea46d7dd19dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:60:cf:e9:cc:d4:b5:82:25:36:99:bb:6f:da:
                    c4:aa:fb:bb:6e:46:dd:d1:d6:75:f1:24:d5:a9:8b:
                    4f:bf:02:7a:0b:3a:48:b7:24:d7:c3:71:f3:88:9f:
                    aa:94:2f:d0:49:02:f7:13:77:7d:dd:4e:f6:b3:7b:
                    65:03:eb:74:db:cf:1c:4c:ac:f0:45:fd:52:63:fb:
                    4b:7c:94:a2:2a:d6:45:97:5b:9e:47:4b:9b:7d:db:
                    bc:96:11:7a:0c:0b:80:ce:df:52:76:25:8f:d6:13:
                    61:47:53:6a:81:ce:db:57:00:9c:13:4f:3b:18:61:
                    b8:0b:ab:4f:20:8e:9a:1a:63:72:42:41:8c:5e:e4:
                    27:17:23:a0:0f:fd:f4:14:37:5c:1d:d3:94:49:d0:
                    d4:40:a0:c3:3f:97:22:4f:e3:c6:c5:21:de:10:07:
                    da:3a:b0:14:e5:98:93:3e:58:73:55:bc:b5:52:f3:
                    0f:ef:bf:45:1f:6a:1e:2b:a8:a6:97:a8:33:33:41:
                    46:58:90:e9:7f:45:97:f9:c6:4c:bb:e5:42:39:0a:
                    6f:81:a4:ec:62:7c:04:01:d5:3e:32:9d:f8:bf:e8:
                    35:d2:13:22:b6:8e:4a:30:d0:d0:db:21:85:22:7c:
                    0e:b5:21:56:15:f4:12:39:03:de:9b:2a:c9:57:6f:
                    4e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DE:02:7B:A4:88:F9:19:96:7D:4F:F3:59:1E:A4:6D:7D:D1:9D:D3
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/D94Ce6SI-RmWfU_zWR6kbX3RndM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2480::/29

    Signature Algorithm: sha256WithRSAEncryption
         0d:39:d4:f0:17:5c:34:cb:80:72:d9:08:b2:65:cd:70:55:38:
         e7:65:49:d3:66:dd:0f:08:b8:87:2c:6d:49:1a:6b:c8:b8:7f:
         1c:87:c9:ce:f0:d0:0e:6e:e5:86:82:96:b2:1b:97:d7:70:41:
         19:51:94:8b:57:fb:7d:aa:6f:04:bd:ce:c6:08:b2:15:ae:e7:
         a2:19:e9:ff:c0:18:e8:5d:c3:e1:a3:9e:36:13:33:7d:87:95:
         21:1e:4b:d5:7b:d7:50:49:69:97:3a:20:dc:07:80:95:f7:55:
         30:dd:9a:42:e1:e2:28:06:7f:97:e7:a7:a4:19:cf:ac:56:2a:
         4c:80:ef:9f:42:27:ef:47:d1:e5:12:e3:0a:93:1d:c2:e1:69:
         96:c5:5b:3c:b6:f2:f3:2a:50:8b:a8:ed:f4:38:ae:20:1c:71:
         c4:df:d3:d8:cc:3a:d4:b9:16:c2:1d:3f:f4:80:30:08:08:50:
         db:16:6e:21:0c:52:a5:7d:77:77:b2:39:87:e5:1d:a6:10:58:
         9f:3b:30:e8:7a:02:bb:88:5d:40:b7:d4:b6:7b:a9:92:d0:ea:
         d1:79:ac:9e:34:48:b4:00:8e:81:f5:0c:34:80:fd:1f:d8:25:
         c8:78:23:06:4a:27:73:ad:7b:fa:3f:36:4f:eb:c7:b2:7c:4a:
         f7:de:78:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----