Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a363a3a2f34382d3438203d3e20333936353033.roa
File:                     323630323a666436303a363a3a2f34382d3438203d3e20333936353033.roa (raw, json)
Hash identifier:          Ix2gRUi7IliE6AZ2onO+I57ZRkdGyI58efW6BxqKIJQ=
Subject key identifier:   59:13:D2:B9:70:72:9D:CD:78:AC:59:87:C5:D0:C7:68:E7:1C:8E:AB
Certificate issuer:       /CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
Certificate serial:       015AED4A7192629B6B108D98868F68095FD16FA4
Authority key identifier: D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a363a3a2f34382d3438203d3e20333936353033.roa
Signing time:             Mon 15 Feb 2021 19:02:43 +0000
ROA not before:           Mon 15 Feb 2021 18:57:43 +0000
ROA not after:            Mon 14 Feb 2022 19:02:43 +0000
asID:                     396503
IP address blocks:        2602:fd60:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5a:ed:4a:71:92:62:9b:6b:10:8d:98:86:8f:68:09:5f:d1:6f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
        Validity
            Not Before: Feb 15 18:57:43 2021 GMT
            Not After : Feb 14 19:02:43 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8f:17:f6:bd:b1:d3:69:27:2b:37:65:4c:b0:
                    e6:97:d7:60:8e:bc:18:07:6e:96:55:bb:24:a7:d8:
                    39:e5:56:59:a0:ac:92:d5:cd:3b:2b:56:fd:0c:35:
                    3a:a0:d7:0c:e4:57:64:40:49:b8:d6:de:ec:83:2b:
                    16:71:e3:ca:64:f3:bb:c1:bf:12:91:e3:ca:7f:fd:
                    27:1d:b9:1a:f0:19:90:b3:7c:5b:ba:d0:01:61:91:
                    08:29:e1:12:d5:22:1a:bd:c8:b2:e5:22:86:a2:e8:
                    53:79:0e:99:cc:1d:78:65:dc:58:a4:b3:fb:bb:55:
                    3d:21:37:fb:b3:ac:f6:38:e0:ee:04:ad:0d:db:6a:
                    58:4f:56:04:5e:5a:c7:be:b3:25:3f:4f:0c:8e:d1:
                    5c:9a:c1:82:b4:eb:25:1a:c9:28:04:0a:05:ea:dd:
                    5b:d9:7d:79:00:93:7f:cf:99:7f:2c:0e:31:91:ab:
                    aa:36:7c:71:5b:44:0c:1f:c6:ec:cb:23:f8:38:65:
                    b2:11:5e:3f:40:93:1b:e5:a7:30:c5:13:fb:4f:c1:
                    48:9b:28:a0:85:fa:b0:dc:c0:14:c4:2d:f6:54:43:
                    e1:b9:45:07:02:4e:05:8f:57:4c:d7:1e:e5:11:07:
                    9f:53:61:1f:f6:d8:3f:f3:39:13:70:ba:98:63:38:
                    0d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:13:D2:B9:70:72:9D:CD:78:AC:59:87:C5:D0:C7:68:E7:1C:8E:AB
            X509v3 Authority Key Identifier:
                keyid:D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/D87CF411D142A7A1AEFCFC3CDDEBCE3DD2DF7A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a363a3a2f34382d3438203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd60:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:c7:ca:40:58:41:88:1b:13:e1:51:7c:1a:41:12:d3:6e:d5:
         c6:e3:34:21:a0:19:e6:6b:a6:98:04:dc:d2:89:a2:af:a0:89:
         03:dd:ea:9c:52:68:3d:49:70:ee:2c:32:43:3f:7a:54:b3:c9:
         b2:12:1d:ba:52:65:d7:71:40:9c:92:27:08:64:9f:d6:4c:cf:
         c7:ff:17:0d:2f:4a:c2:38:1a:2f:c3:61:59:aa:07:78:f8:21:
         da:4f:3f:4c:73:d8:e4:3f:38:8c:ea:f0:37:f0:3f:7f:2f:ac:
         af:1e:85:ba:ac:b2:21:61:bc:b0:16:8f:40:a3:17:7c:24:57:
         76:f7:10:bf:40:87:c9:be:e3:ed:07:8c:aa:bc:e2:d8:b2:8d:
         e9:a9:11:81:1a:72:6e:20:4e:1f:41:cd:fb:ef:cb:49:07:2c:
         4d:31:51:51:22:01:6f:58:0b:5c:5b:ee:db:4a:bc:c3:0b:18:
         4b:55:58:c6:98:db:80:f0:a8:64:4b:e3:b1:57:76:65:29:67:
         3f:dc:4d:74:89:cf:7f:52:d6:e1:74:d3:3d:8f:a6:61:53:0f:
         67:35:c3:37:f9:89:04:20:0d:95:74:5e:98:65:23:33:5e:1f:
         c3:1d:ab:c3:10:5c:0a:5b:e4:a0:98:2f:6c:d6:0b:c1:46:40:
         a4:b1:ed:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:25 2024 by rpki-client on console-fra.rpki-client.org