Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a31313a3a2f34382d3438203d3e203439313334.roa
File:                     323630323a666436303a31313a3a2f34382d3438203d3e203439313334.roa (raw, json)
Hash identifier:          TRJfZsMk2T3cHgr1oZRsVBEVtgsCPtjk76MAR0XhA4Q=
Subject key identifier:   A9:6F:56:FC:AF:24:BF:DF:9C:80:DE:9C:81:B4:02:CB:01:4A:C2:73
Certificate issuer:       /CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
Certificate serial:       2C42DFFF4DF6ECE49DB090952AA939E27F70FD34
Authority key identifier: D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a31313a3a2f34382d3438203d3e203439313334.roa
Signing time:             Tue 21 Jul 2020 01:29:13 +0000
ROA not before:           Tue 21 Jul 2020 01:24:13 +0000
ROA not after:            Wed 21 Jul 2021 01:29:13 +0000
asID:                     49134
IP address blocks:        2602:fd60:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:42:df:ff:4d:f6:ec:e4:9d:b0:90:95:2a:a9:39:e2:7f:70:fd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
        Validity
            Not Before: Jul 21 01:24:13 2020 GMT
            Not After : Jul 21 01:29:13 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:0e:17:30:1a:14:fa:79:72:05:12:d9:fd:
                    25:81:c4:29:62:c9:90:94:a0:0c:ab:01:54:ef:e3:
                    dc:3a:0d:ee:0a:8f:d2:54:05:22:24:bf:e2:16:b1:
                    1b:10:e1:d3:13:6f:c2:1a:b2:ae:07:9b:d4:f8:8f:
                    04:a7:24:79:29:13:00:66:e5:ab:10:ab:ae:fc:28:
                    66:3e:24:1b:77:be:d9:9f:f6:93:5a:0d:5f:f0:a3:
                    c9:a2:3e:b1:5a:df:a9:78:d2:75:ed:c0:fe:db:37:
                    3a:f3:8f:71:9e:88:ea:7c:5d:d1:91:9c:a5:c4:e6:
                    00:9f:2e:57:4a:8e:23:a7:d4:cd:1a:4f:f8:50:25:
                    8a:d6:50:6c:d4:a3:4a:36:a6:ff:5e:5b:07:a9:3a:
                    3e:80:2e:58:a0:b7:89:75:e1:46:e7:83:4c:a7:00:
                    49:87:46:c5:b7:b3:8c:14:12:73:c2:4c:b2:ee:16:
                    f9:91:45:b8:4f:6f:8b:c2:11:d1:c1:72:5d:5a:24:
                    22:07:f4:d6:c8:e9:d9:23:d4:46:8f:ce:89:b3:48:
                    ec:64:4a:33:69:6e:38:31:0e:59:50:44:79:5d:8e:
                    6e:22:2e:94:18:e8:4e:b5:70:a3:2b:f9:64:3e:e5:
                    e7:a5:f7:6d:8a:a5:be:c7:44:ee:59:d6:fb:4d:87:
                    ea:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6F:56:FC:AF:24:BF:DF:9C:80:DE:9C:81:B4:02:CB:01:4A:C2:73
            X509v3 Authority Key Identifier:
                keyid:D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/D87CF411D142A7A1AEFCFC3CDDEBCE3DD2DF7A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a31313a3a2f34382d3438203d3e203439313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd60:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:0d:b9:c5:0b:d9:c4:a8:d2:0f:a7:f8:56:9d:60:14:ce:a6:
         b5:88:00:b3:54:1f:83:00:a0:af:0c:05:50:f1:54:1a:af:3e:
         f4:26:03:6a:93:b8:25:7a:f5:1d:ba:c1:5d:13:54:a0:bd:8a:
         3a:72:15:97:e4:0b:60:59:33:8f:89:01:6e:36:28:d5:6e:2b:
         f9:8c:30:4b:56:95:fe:74:cf:93:ce:c4:49:87:cd:cb:db:f8:
         4b:38:ec:0c:ae:be:53:51:ca:ea:34:c3:e4:e1:94:37:b7:fe:
         c3:e9:ea:d7:a0:63:fb:f3:ed:09:e5:87:9a:4f:95:6e:11:60:
         24:63:5c:6d:b0:fe:d0:4f:7f:64:93:4a:6c:50:36:d1:03:24:
         c2:2a:a7:ea:c2:fb:26:14:b4:e5:d2:b1:65:3c:42:4f:cb:32:
         fe:fe:74:3c:6a:68:00:b8:64:80:10:86:c4:3d:36:d7:1b:61:
         50:e4:93:00:17:1b:f9:27:df:6b:a1:82:43:67:5f:ba:d5:04:
         e4:ed:4f:f3:93:95:ad:1d:5f:ac:9e:f1:50:50:38:74:3c:cc:
         98:bd:f9:9e:8a:dc:17:d7:b9:3f:11:be:5e:85:71:0e:9a:52:
         6f:bf:3c:7e:13:40:45:ac:d3:e7:49:e8:85:b8:21:6d:91:f8:
         8f:a6:c3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org