Role3: Role1 and Azure subscription Roles only.
Role4: Role2 only
Explanation:
There's a difference between Built-in AD roles and Built-in Subscription roles.
**Built-in AD roles can't be cloned, but built-in subscription roles can be. Custom roles of either type can be cloned.**
To clone the Bulit-in subscription Role, you open the subscription or the Resource group where you want to create the custom role and assign the permissions --> Go to Access Control (IAM) --> Roles tab --> Search for the subscription Role then clone it from the three dots in the right of the role.
Reference: https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal

Thanks. Answer should be
Role3: Role1 and built-in Azure subscription roles only
Role4: Role2 only
Explanation: You cannot clone built-in Azure AD role