Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-CA/0/3135382e35312e3131332e302f32342d3234203d3e20333935303932.roa
File:                     3135382e35312e3131332e302f32342d3234203d3e20333935303932.roa (raw, json)
Hash identifier:          QkbbuUPrAN+M1ubJr5lEsDHaeiRqsvFFDSRRZFOMpB0=
Subject key identifier:   A1:AD:49:63:12:32:08:81:2D:BA:22:5E:F0:45:9A:0C:5F:EC:98:D7
Certificate issuer:       /CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
Certificate serial:       034EB0049D78A299A124D54B1018B6C4211252B1
Authority key identifier: D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/3135382e35312e3131332e302f32342d3234203d3e20333935303932.roa
Signing time:             Sun 08 Nov 2020 05:19:22 +0000
ROA not before:           Sun 08 Nov 2020 05:14:22 +0000
ROA not after:            Sun 07 Nov 2021 05:19:22 +0000
asID:                     395092
IP address blocks:        158.51.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4e:b0:04:9d:78:a2:99:a1:24:d5:4b:10:18:b6:c4:21:12:52:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
        Validity
            Not Before: Nov  8 05:14:22 2020 GMT
            Not After : Nov  7 05:19:22 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:57:ad:d3:08:16:5c:5c:c3:f1:a4:f1:c4:cc:
                    59:b3:c6:80:c4:6b:ac:bd:a1:be:e1:59:b4:3e:43:
                    0f:3b:5a:01:f1:08:78:b9:e9:67:0a:2a:2d:f0:7b:
                    34:51:bb:89:02:5f:5d:e5:00:b6:13:e9:ef:cf:c3:
                    b4:63:89:06:fa:2e:40:34:0d:65:70:8c:21:29:29:
                    c8:71:ed:c3:1e:ec:aa:70:79:e0:20:83:98:e3:b4:
                    f1:48:91:24:03:65:03:39:e7:fb:60:ab:5d:cb:62:
                    09:1a:2f:15:19:62:cb:7e:1b:de:a3:82:38:73:49:
                    db:e8:1b:bc:60:fc:bc:38:da:a1:67:87:c7:20:ac:
                    bc:9f:c0:d9:0f:a9:38:ac:32:5f:2d:f5:a0:87:bb:
                    a6:48:7f:c0:04:11:2e:35:1c:11:a3:71:1c:fc:09:
                    94:75:54:a9:8e:12:5f:d4:a1:bb:c4:92:44:0e:5c:
                    18:71:7d:59:bd:82:aa:7f:35:b5:63:e6:dd:d6:b6:
                    59:9b:b1:d8:df:df:30:2a:86:d8:19:c8:27:cb:72:
                    ee:c6:dc:3b:ec:ee:12:c7:21:1e:a2:b7:5c:cf:79:
                    91:2c:42:55:f8:e5:4e:55:85:de:25:ef:07:05:f5:
                    b2:d2:97:df:0a:61:e0:e6:a9:18:17:c0:6e:83:45:
                    7b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AD:49:63:12:32:08:81:2D:BA:22:5E:F0:45:9A:0C:5F:EC:98:D7
            X509v3 Authority Key Identifier:
                keyid:D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/D87CF411D142A7A1AEFCFC3CDDEBCE3DD2DF7A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/3135382e35312e3131332e302f32342d3234203d3e20333935303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:90:fc:ba:d7:82:bf:03:87:65:38:3e:cb:a7:26:65:4c:00:
         f9:a0:e0:c0:85:3e:89:92:2e:d4:76:5d:73:2a:76:f7:01:8d:
         9d:de:01:28:96:f1:30:f5:61:38:82:65:89:f3:22:5a:ed:7c:
         f1:07:7f:68:72:1a:39:fc:e9:d1:02:db:76:c4:24:69:cd:81:
         fb:80:71:95:30:6f:20:5a:a6:5b:bb:17:04:39:59:a2:f6:b0:
         50:84:dd:9f:bd:46:43:b3:06:b7:50:d7:96:52:31:9a:00:b8:
         25:71:bb:9b:8c:36:e9:e6:66:a6:17:91:04:78:00:4a:6c:f3:
         12:08:65:0e:43:7e:60:2a:7f:1f:24:b9:56:37:e0:9f:fd:1a:
         5f:12:8b:5d:fb:27:b9:f6:20:45:4c:7d:e3:97:20:a5:1e:0e:
         09:f1:19:76:69:7a:e4:37:43:1f:ac:48:72:ef:2a:6e:7c:49:
         69:45:3d:3f:49:65:dd:48:bd:51:3c:6a:dc:66:c6:dc:5b:ea:
         28:a5:bc:29:d9:84:3a:3d:b1:32:d5:a4:f2:70:99:84:79:39:
         96:83:5e:0d:28:71:a9:d3:1c:48:34:50:97:3e:d3:76:67:c8:
         96:5a:f3:70:b2:d2:8a:2b:ad:e5:b9:df:3a:c5:0a:d6:30:4b:
         98:11:a3:3c
-----BEGIN CERTIFICATE-----
MIIHjjCCBnagAwIBAgIUA06wBJ14opmhJNVLEBi2xCESUrEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGY2OTE2ZDQ2MzZhYmQ1Yzk0YTViZGFlZTIyZjQwOTI3
OGZlZWQ2ODU0NTA0ZWJjNTAwHhcNMjAxMTA4MDUxNDIyWhcNMjExMTA3MDUxOTIy
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMERENTdBREQz
MDgxNjVDNUNDM0YxQTRGMUM0Q0M1OUIzQzY4MEM0NkJBQ0JEQTFCRUUxNTlCNDNF
NDMwRjNCNUEwMUYxMDg3OEI5RTk2NzBBMkEyREYwN0IzNDUxQkI4OTAyNUY1REU1
MDBCNjEzRTlFRkNGQzNCNDYzODkwNkZBMkU0MDM0MEQ2NTcwOEMyMTI5MjlDODcx
RURDMzFFRUNBQTcwNzlFMDIwODM5OEUzQjRGMTQ4OTEyNDAzNjUwMzM5RTdGQjYw
QUI1RENCNjIwOTFBMkYxNTE5NjJDQjdFMUJERUEzODIzODczNDlEQkU4MUJCQzYw
RkNCQzM4REFBMTY3ODdDNzIwQUNCQzlGQzBEOTBGQTkzOEFDMzI1RjJERjVBMDg3
QkJBNjQ4N0ZDMDA0MTEyRTM1MUMxMUEzNzExQ0ZDMDk5NDc1NTRBOThFMTI1RkQ0
QTFCQkM0OTI0NDBFNUMxODcxN0Q1OUJEODJBQTdGMzVCNTYzRTZEREQ2QjY1OTlC
QjFEOERGREYzMDJBODZEODE5QzgyN0NCNzJFRUM2REMzQkVDRUUxMkM3MjExRUEy
Qjc1Q0NGNzk5MTJDNDI1NUY4RTU0RTU1ODVERTI1RUYwNzA1RjVCMkQyOTdERjBB
NjFFMEU2QTkxODE3QzA2RTgzNDU3QjBGMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAN1XrdMIFlxcw/Gk8cTMWbPGgMRrrL2hvuFZtD5D
DztaAfEIeLnpZwoqLfB7NFG7iQJfXeUAthPp78/DtGOJBvouQDQNZXCMISkpyHHt
wx7sqnB54CCDmOO08UiRJANlAznn+2CrXctiCRovFRliy34b3qOCOHNJ2+gbvGD8
vDjaoWeHxyCsvJ/A2Q+pOKwyXy31oIe7pkh/wAQRLjUcEaNxHPwJlHVUqY4SX9Sh
u8SSRA5cGHF9Wb2Cqn81tWPm3da2WZux2N/fMCqG2BnIJ8ty7sbcO+zuEschHqK3
XM95kSxCVfjlTlWF3iXvBwX1stKX3wph4OapGBfAboNFew8CAwEAAaOCApIwggKO
MB0GA1UdDgQWBBShrUljEjIIgS26Il7wRZoMX+yY1zAfBgNVHSMEGDAWgBTYfPQR
0UKnoa78/Dzd68490t96fzAOBgNVHQ8BAf8EBAMCB4AwdQYDVR0fBG4wbDBqoGig
ZoZkcnN5bmM6Ly9ycGtpLnRvb2xzLndlc3Rjb25uZWN0LmNhL3JlcG8vV2VzdENv
bm5lY3QtQ0EvMC9EODdDRjQxMUQxNDJBN0ExQUVGQ0ZDM0NEREVCQ0UzREQyREY3
QTdGLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMTE0NjkzOGMtYzYwNS00Nzc5LWJmNjAtODIwYTE2
ZmE3MDFjLzhmNjkxNmQ0NjM2YWJkNWM5NGE1YmRhZWUyMmY0MDkyNzhmZWVkNjg1
NDUwNGViYzUwLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRy
c3luYzovL3Jwa2kudG9vbHMud2VzdGNvbm5lY3QuY2EvcmVwby9XZXN0Q29ubmVj
dC1DQS8wLzMxMzUzODJlMzUzMTJlMzEzMTMzMmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzMzOTM1MzAzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjNxMA0GCSqGSIb3DQEBCwUAA4IB
AQCXkPy614K/A4dlOD7LpyZlTAD5oODAhT6Jki7Udl1zKnb3AY2d3gEolvEw9WE4
gmWJ8yJa7XzxB39ocho5/OnRAtt2xCRpzYH7gHGVMG8gWqZbuxcEOVmi9rBQhN2f
vUZDswa3UNeWUjGaALglcbubjDbp5mamF5EEeABKbPMSCGUOQ35gKn8fJLlWN+Cf
/RpfEotd+ye59iBFTH3jlyClHg4J8Rl2aXrkN0MfrEhy7ypufElpRT0/SWXdSL1R
PGrcZsbcW+oopbwp2YQ6PbEy1aTycJmEeTmWg14NKHGp0xxINFCXPtN2Z8iWWvNw
stKKK63lud86xQrWMEuYEaM8
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org