Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a323a3a2f34382d3438203d3e20333936353036.roa
File:                     323630323a666436303a323a3a2f34382d3438203d3e20333936353036.roa (raw, json)
Hash identifier:          eVXJc+ITnDFRpvSbPjzE1W8gQI09eRszP8RUqRseF2U=
Subject key identifier:   26:F7:D6:44:B5:BE:01:02:E3:9F:2B:26:6D:D6:C7:D4:B5:0B:53:14
Certificate issuer:       /CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
Certificate serial:       370801E302F1BC898A90811EC178552CAEF0617D
Authority key identifier: D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a323a3a2f34382d3438203d3e20333936353036.roa
Signing time:             Fri 12 Feb 2021 06:02:41 +0000
ROA not before:           Fri 12 Feb 2021 05:57:41 +0000
ROA not after:            Fri 11 Feb 2022 06:02:41 +0000
asID:                     396506
IP address blocks:        2602:fd60:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:08:01:e3:02:f1:bc:89:8a:90:81:1e:c1:78:55:2c:ae:f0:61:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
        Validity
            Not Before: Feb 12 05:57:41 2021 GMT
            Not After : Feb 11 06:02:41 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2c:65:3c:a6:f4:ba:f7:96:b3:ac:d0:37:1a:
                    61:ec:57:5e:64:5d:76:95:d1:18:47:f8:0d:59:da:
                    ac:03:7a:f5:14:88:84:55:1c:3e:ae:67:b8:27:ca:
                    eb:7f:9a:e4:fa:67:ed:3b:51:ed:2a:28:81:15:16:
                    57:31:69:b6:53:d4:5d:88:db:e1:a6:49:15:11:64:
                    93:10:dc:8c:5b:94:38:03:8c:c5:41:32:ca:cb:07:
                    17:0b:75:2d:38:f1:78:d6:b7:7d:fa:27:48:de:62:
                    35:35:03:e4:62:cb:43:6b:91:ed:79:5d:0b:5b:7f:
                    2f:a8:d1:93:9d:db:a6:1b:a9:6c:f7:4c:ce:ca:c2:
                    f5:a0:f7:9b:f8:db:2a:2a:ef:37:6d:26:a4:b1:68:
                    e1:d2:5b:99:98:30:20:ce:ea:2a:d4:fd:fb:2c:8f:
                    db:5f:a5:73:f5:03:49:1a:a0:1d:35:3e:45:bd:b3:
                    67:2b:b8:d4:c5:a1:65:94:df:d3:5f:a3:2d:d1:bd:
                    3f:a7:da:56:5d:6e:72:85:f3:98:da:46:7e:4d:a3:
                    d1:40:0a:a2:2d:aa:b5:ff:c0:29:40:6c:ae:aa:5a:
                    4d:cb:e2:d4:c1:cd:8f:d6:85:2a:c3:ea:90:7b:c8:
                    87:e9:39:cc:9a:ad:75:e4:aa:f6:20:c1:90:d6:59:
                    37:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F7:D6:44:B5:BE:01:02:E3:9F:2B:26:6D:D6:C7:D4:B5:0B:53:14
            X509v3 Authority Key Identifier:
                keyid:D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/D87CF411D142A7A1AEFCFC3CDDEBCE3DD2DF7A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a323a3a2f34382d3438203d3e20333936353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd60:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:03:1e:ea:54:69:73:bf:e4:1a:86:48:66:15:bf:be:0d:27:
         c8:e2:32:fc:a8:4e:c1:8b:33:ba:2c:72:bb:f2:ee:22:9f:86:
         35:25:b5:2b:4e:fb:48:75:48:63:53:95:e6:94:30:35:61:13:
         2c:f2:a5:d1:02:0d:6e:1c:b3:46:23:b0:15:8c:fb:68:46:44:
         23:34:2b:d9:b8:85:13:f2:ab:89:01:1e:66:51:08:2c:c6:36:
         27:9c:0f:cc:b4:49:bc:cf:c6:62:fc:6d:09:8c:4f:be:3e:42:
         33:a1:7f:02:53:a2:0a:f8:fa:de:af:96:3a:35:7a:cb:c7:13:
         e2:83:43:92:3c:4a:f1:0a:03:8a:14:24:43:eb:ae:14:4e:17:
         29:ce:55:e5:24:99:58:31:0e:13:32:68:8c:ce:7c:9b:e0:3f:
         82:81:7e:a7:42:5a:df:2d:f6:71:69:82:a2:20:b0:46:a3:c9:
         1e:2e:b1:2e:05:fc:db:82:34:3d:63:f9:89:b2:cc:c1:84:94:
         0a:bd:7d:d2:75:41:d3:e1:97:68:af:1e:27:41:d6:b7:d3:e8:
         bb:b9:0a:1f:c5:ab:ff:75:99:21:e3:52:69:ae:ed:3f:da:04:
         74:bf:48:78:79:09:b0:ca:7e:f2:0b:6f:6f:67:c7:b2:1a:16:
         47:df:29:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----