Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a333a3a2f34382d3438203d3e20333936353033.roa
File:                     323630323a666436303a333a3a2f34382d3438203d3e20333936353033.roa (raw, json)
Hash identifier:          kKbsv7SEZPMT+qynXX6uxyotxM244l7hdLeIgMqol5I=
Subject key identifier:   32:12:7C:F3:D0:A2:29:8E:DF:92:54:61:68:79:6F:91:16:15:32:E3
Certificate issuer:       /CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
Certificate serial:       18FEB46B5D5A158167442994066F6FD727D8BFB6
Authority key identifier: D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a333a3a2f34382d3438203d3e20333936353033.roa
Signing time:             Fri 12 Feb 2021 06:02:58 +0000
ROA not before:           Fri 12 Feb 2021 05:57:58 +0000
ROA not after:            Fri 11 Feb 2022 06:02:58 +0000
asID:                     396503
IP address blocks:        2602:fd60:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fe:b4:6b:5d:5a:15:81:67:44:29:94:06:6f:6f:d7:27:d8:bf:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
        Validity
            Not Before: Feb 12 05:57:58 2021 GMT
            Not After : Feb 11 06:02:58 2022 GMT
        Subject: CN=3082010A0282010100BD33759AE967C2A3B0F759477872FF92290FDBF3DA37B6B3F44586CDFBBCA65462F4C64DB0E30C77BFD2727AB1E0D005AB68A9FA0A8C0755C2E7B8676094C171D01D10C20FB39916E81D71E5D816066C79903C4755B361B6E7C64556DAEF1FC054D644F784C0228AEEDBBBA03A91DF1FD87B3D9F352B63A9A11643B5C15483F1372A41C63771CB6A581481115F34F713A3605F0EC65CBAC0E69D4A25B939DD352152AF220E28CBC95FB73E37DE84EB8D2852503701DC78542728A000E2993EA6B6FF9454EEAB344BCA6755839E6DE972FD48D9B5C70775FBBE35CB8FB92EED6D19C1B7C64C4BE1E33C9C8E2C9D8441F138547580FD06D5BAFA3398CE3FE69D250203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:75:9a:e9:67:c2:a3:b0:f7:59:47:78:72:
                    ff:92:29:0f:db:f3:da:37:b6:b3:f4:45:86:cd:fb:
                    bc:a6:54:62:f4:c6:4d:b0:e3:0c:77:bf:d2:72:7a:
                    b1:e0:d0:05:ab:68:a9:fa:0a:8c:07:55:c2:e7:b8:
                    67:60:94:c1:71:d0:1d:10:c2:0f:b3:99:16:e8:1d:
                    71:e5:d8:16:06:6c:79:90:3c:47:55:b3:61:b6:e7:
                    c6:45:56:da:ef:1f:c0:54:d6:44:f7:84:c0:22:8a:
                    ee:db:bb:a0:3a:91:df:1f:d8:7b:3d:9f:35:2b:63:
                    a9:a1:16:43:b5:c1:54:83:f1:37:2a:41:c6:37:71:
                    cb:6a:58:14:81:11:5f:34:f7:13:a3:60:5f:0e:c6:
                    5c:ba:c0:e6:9d:4a:25:b9:39:dd:35:21:52:af:22:
                    0e:28:cb:c9:5f:b7:3e:37:de:84:eb:8d:28:52:50:
                    37:01:dc:78:54:27:28:a0:00:e2:99:3e:a6:b6:ff:
                    94:54:ee:ab:34:4b:ca:67:55:83:9e:6d:e9:72:fd:
                    48:d9:b5:c7:07:75:fb:be:35:cb:8f:b9:2e:ed:6d:
                    19:c1:b7:c6:4c:4b:e1:e3:3c:9c:8e:2c:9d:84:41:
                    f1:38:54:75:80:fd:06:d5:ba:fa:33:98:ce:3f:e6:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:12:7C:F3:D0:A2:29:8E:DF:92:54:61:68:79:6F:91:16:15:32:E3
            X509v3 Authority Key Identifier:
                keyid:D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/D87CF411D142A7A1AEFCFC3CDDEBCE3DD2DF7A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a333a3a2f34382d3438203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd60:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:5b:cb:b2:e3:3b:a0:cb:86:22:b8:69:0f:df:98:06:8e:cd:
         0a:0b:83:d5:a5:be:d4:39:f5:47:f6:b4:b8:92:6e:ef:4f:54:
         5d:59:4f:52:d9:7c:1c:86:00:1a:a8:13:81:94:5e:11:bb:41:
         2c:1c:0e:b9:8d:a2:f2:4d:38:2b:bd:7f:2f:3f:4d:fe:55:3d:
         d9:34:13:aa:aa:b4:81:64:7e:44:a4:41:97:57:6f:59:de:a4:
         c7:ca:e4:cf:c9:e2:da:79:5a:20:44:09:71:fc:c7:c7:b8:46:
         62:09:7d:89:53:aa:8b:5c:98:43:72:61:f2:c6:f6:d4:2a:3b:
         49:5f:64:af:98:76:22:c4:ef:20:e5:87:73:e5:89:1c:61:05:
         14:85:8a:c3:f3:19:de:f7:05:84:f4:0c:20:40:68:b5:23:f0:
         52:40:9b:80:fd:5f:c7:a2:a3:4d:fb:b2:97:6c:73:a0:bf:08:
         38:f9:3f:79:f5:1e:f6:4d:d7:7d:2b:e4:d4:aa:fe:af:e3:40:
         64:44:19:c0:5c:23:c2:2f:c1:f1:59:d2:d6:55:5f:0d:22:eb:
         59:a2:66:ef:83:b0:f5:2a:47:cf:e8:f7:5f:e5:67:8c:c9:ac:
         7f:00:97:39:b6:45:d2:4a:1f:8c:8e:64:c1:88:13:63:15:58:
         6d:03:7b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org