Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a323a3a2f34382d3438203d3e20333936353033.roa
File:                     323630323a666436303a323a3a2f34382d3438203d3e20333936353033.roa (raw, json)
Hash identifier:          MApBLWEIqigZ7iqoNhrg6uY0nwjameDNVQw3Q82m4UU=
Subject key identifier:   FB:65:CD:F6:C1:A2:0E:2E:9C:D5:CD:88:24:FF:5F:A3:1A:65:52:F6
Certificate issuer:       /CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
Certificate serial:       523571B743E23E937729ACDFEAC81AE2E345B3BF
Authority key identifier: D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a323a3a2f34382d3438203d3e20333936353033.roa
Signing time:             Mon 15 Feb 2021 19:02:56 +0000
ROA not before:           Mon 15 Feb 2021 18:57:56 +0000
ROA not after:            Mon 14 Feb 2022 19:02:56 +0000
asID:                     396503
IP address blocks:        2602:fd60:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:35:71:b7:43:e2:3e:93:77:29:ac:df:ea:c8:1a:e2:e3:45:b3:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
        Validity
            Not Before: Feb 15 18:57:56 2021 GMT
            Not After : Feb 14 19:02:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:f9:cb:fa:c6:06:aa:aa:0c:f4:7c:14:0e:
                    88:32:c0:3f:b4:c2:32:16:d0:62:26:0b:13:59:a2:
                    01:c0:42:48:5c:b2:f0:b9:3d:5e:be:26:3a:d3:bb:
                    86:3f:dd:a3:42:9b:53:1f:c0:a8:8f:b6:7e:a9:a6:
                    9b:3c:55:18:be:29:ce:6d:4d:c3:42:67:dc:d2:37:
                    08:b4:5f:4d:21:b6:57:e2:d8:6d:17:2c:a9:1d:35:
                    01:32:88:df:fe:68:b1:21:f1:a3:7b:3c:f5:63:8c:
                    29:e6:ec:e1:cd:da:02:c5:6e:85:e0:b0:e5:0b:5b:
                    30:4b:e6:17:1a:ce:f9:73:f6:77:bd:2e:51:c3:cd:
                    74:03:50:ef:ff:14:e7:50:dc:c5:a3:4e:a3:b3:1b:
                    fc:2b:7e:d3:03:9c:0e:3e:e4:87:38:11:19:f6:f5:
                    51:8e:83:05:46:be:24:3a:3d:05:f4:80:f6:ea:0f:
                    72:51:0f:af:ee:8c:39:eb:26:10:e2:85:75:f9:3d:
                    4a:6d:29:d8:24:74:a6:a7:f5:d5:99:a6:06:b6:9b:
                    4b:b2:88:d9:40:ba:5f:67:a6:99:cd:3f:10:58:82:
                    ba:b8:a8:2a:77:87:50:1b:ba:db:86:e9:f9:98:dd:
                    c7:13:01:9b:d9:c7:e3:46:26:8d:4e:6a:da:6e:59:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:65:CD:F6:C1:A2:0E:2E:9C:D5:CD:88:24:FF:5F:A3:1A:65:52:F6
            X509v3 Authority Key Identifier:
                keyid:D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/D87CF411D142A7A1AEFCFC3CDDEBCE3DD2DF7A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a323a3a2f34382d3438203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd60:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:a2:d0:43:a7:74:11:af:79:57:dd:34:95:b9:32:e4:84:06:
         34:4f:4f:2d:91:4a:65:b3:7b:53:41:e4:13:ea:c7:bd:00:1d:
         cb:da:73:24:20:44:0d:c6:16:e8:95:0f:95:ee:b1:aa:a3:03:
         32:ef:68:f4:0d:ca:45:f3:5a:4d:82:79:6f:7a:86:b6:5b:8c:
         57:8c:cf:70:2a:17:8b:a0:fd:95:9d:c0:de:7c:4d:3c:a2:8e:
         e1:f9:f3:46:10:86:70:2f:22:f7:bc:ee:43:98:83:af:76:1b:
         4a:e8:d9:c3:bf:40:5b:65:0b:ee:6a:34:b9:14:70:c7:96:a5:
         87:cf:98:e9:2a:91:ad:8d:8a:7d:17:32:af:f8:d0:06:d4:50:
         31:de:18:c4:81:af:c1:5c:87:c6:38:28:2e:da:81:4b:d5:34:
         55:04:9f:51:72:ab:6f:eb:bf:07:bd:6b:54:79:bc:af:08:d8:
         b9:16:65:64:5a:90:9d:fd:1d:e1:95:e7:d8:e1:76:24:e0:61:
         3c:5e:42:bc:8f:eb:b0:89:fd:40:60:d6:c2:4e:72:3c:e8:1e:
         49:a2:8a:be:62:3a:9c:90:68:eb:d5:9a:02:fa:c2:34:86:e4:
         58:21:77:36:33:ea:dd:d9:ee:98:29:22:32:90:77:27:df:a9:
         83:77:99:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----