Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a3a2f34342d3435203d3e20333936353033.roa
File:                     323630323a666436303a3a2f34342d3435203d3e20333936353033.roa (raw, json)
Hash identifier:          KnKi9Ne6hQUKiJcwS7hx2RXxV/80rtTPsZdp31vyVgo=
Subject key identifier:   A4:13:8E:8A:39:BE:FB:6C:C0:8D:D1:42:A5:3F:2E:FF:C4:03:62:E9
Certificate issuer:       /CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
Certificate serial:       42C5B1276E502D4F9F24836C45EA6937EC4A4074
Authority key identifier: D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a3a2f34342d3435203d3e20333936353033.roa
Signing time:             Tue 26 May 2020 21:20:55 +0000
ROA not before:           Tue 26 May 2020 21:15:55 +0000
ROA not after:            Wed 26 May 2021 21:20:55 +0000
asID:                     396503
IP address blocks:        2602:fd60::/44 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c5:b1:27:6e:50:2d:4f:9f:24:83:6c:45:ea:69:37:ec:4a:40:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
        Validity
            Not Before: May 26 21:15:55 2020 GMT
            Not After : May 26 21:20:55 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:b5:5a:5d:e6:3d:02:d3:ae:a9:ec:41:12:
                    e6:5b:22:ce:9d:dc:7d:4f:d4:5f:f5:26:9c:fa:82:
                    e6:d9:f7:81:6d:22:62:87:5f:b7:aa:96:48:30:d4:
                    8b:7c:d7:26:d9:da:86:9b:94:20:aa:71:a7:56:97:
                    b4:7f:dc:a7:2c:43:75:58:f4:f4:0a:42:23:3b:d1:
                    db:86:85:b0:88:ae:87:7c:f8:33:b8:cf:83:bb:49:
                    f7:e4:6d:c8:0c:0d:b0:05:4f:61:41:00:75:67:82:
                    cd:54:7f:7c:61:19:4c:51:c5:c8:df:52:dc:79:42:
                    1f:5c:2a:ce:26:48:51:96:3d:c8:82:16:28:28:23:
                    95:35:e6:57:be:7b:89:f3:ed:c8:a6:eb:a3:f1:19:
                    8b:93:9b:25:d9:f5:b5:5e:eb:3e:fb:3b:85:e2:d9:
                    bc:80:c9:4d:87:37:2b:b0:73:34:41:f9:0f:f9:7d:
                    c7:d0:90:09:aa:e9:d4:86:66:b0:20:95:9e:3b:db:
                    e5:3c:18:9b:0b:5c:8a:dc:d8:cf:e8:6c:7f:41:9e:
                    e4:71:25:83:0a:d1:42:bb:df:9d:14:4c:61:e9:f5:
                    6a:2c:83:95:11:e7:68:dc:98:14:82:12:96:12:9d:
                    37:82:7e:e3:70:cf:71:8f:19:1d:f8:0b:6b:e7:da:
                    a4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:13:8E:8A:39:BE:FB:6C:C0:8D:D1:42:A5:3F:2E:FF:C4:03:62:E9
            X509v3 Authority Key Identifier:
                keyid:D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/D87CF411D142A7A1AEFCFC3CDDEBCE3DD2DF7A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a3a2f34342d3435203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd60::/44

    Signature Algorithm: sha256WithRSAEncryption
         ac:04:ba:d0:5a:6f:1d:90:dc:d5:2b:52:39:da:57:6a:7b:ee:
         13:b4:3c:ea:c9:a3:79:bb:dc:29:9c:5d:af:b7:25:71:47:a0:
         29:8a:b3:77:ed:7c:b9:46:28:f0:ae:09:89:8f:51:03:a1:c3:
         da:e6:77:77:bb:de:e3:3a:8f:78:72:75:90:94:23:17:67:3b:
         ac:c6:8c:19:d5:48:c9:d7:87:5f:76:45:2d:3f:81:40:a8:90:
         19:3a:00:a1:3e:ee:05:d9:23:47:06:a9:40:44:65:62:7a:d7:
         7a:ec:ed:86:84:f9:d0:f2:3c:d1:04:c7:4c:aa:8f:df:e6:44:
         9b:7c:aa:08:b4:7a:ae:59:72:e7:67:5c:5f:29:24:d4:05:ac:
         46:2c:47:46:a7:29:f5:21:88:f8:9f:2f:48:52:44:2a:6c:d6:
         3a:c0:6a:a6:12:c1:7e:14:80:cb:55:71:12:11:83:81:57:25:
         f4:45:0d:66:c6:54:b7:6e:2a:48:4e:4e:42:39:78:6d:13:bc:
         24:a4:33:98:06:69:46:09:a9:93:7f:77:87:2e:6b:a6:c7:b6:
         ec:93:ce:23:ee:69:81:f9:20:e8:c1:ef:b0:f1:5b:f5:cc:29:
         fd:c1:36:b7:28:4a:f7:21:28:fe:23:75:93:f9:6b:a2:21:92:
         53:02:2f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----