Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a6666303a3a2f34382d3438203d3e20313337393038.roa
File:                     323630323a666436303a6666303a3a2f34382d3438203d3e20313337393038.roa (raw, json)
Hash identifier:          RG+CSDarLIfdt2ozRc8woJGoaaVAAV0cKkZCFt+CEeQ=
Subject key identifier:   98:C4:EF:A6:B0:13:57:69:65:8A:C6:17:04:06:83:4B:84:06:4C:EE
Certificate issuer:       /CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
Certificate serial:       7E861044C02D7A29FA36B70505CB646D3E66F310
Authority key identifier: D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a6666303a3a2f34382d3438203d3e20313337393038.roa
Signing time:             Tue 26 May 2020 21:19:42 +0000
ROA not before:           Tue 26 May 2020 21:14:42 +0000
ROA not after:            Wed 26 May 2021 21:19:42 +0000
asID:                     137908
IP address blocks:        2602:fd60:ff0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:86:10:44:c0:2d:7a:29:fa:36:b7:05:05:cb:64:6d:3e:66:f3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
        Validity
            Not Before: May 26 21:14:42 2020 GMT
            Not After : May 26 21:19:42 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:c9:75:d0:1a:1c:e7:ef:9b:c8:75:5e:4b:
                    13:4b:d4:d8:a2:fe:5d:85:46:68:28:54:fd:b7:24:
                    d3:76:1d:5b:78:ce:12:20:82:01:52:5f:fb:c1:53:
                    d5:f3:e2:ec:63:9a:37:32:11:dd:00:a4:62:24:1d:
                    3f:e8:dd:52:4e:1c:d4:3d:98:66:47:7a:72:9f:ff:
                    74:2c:01:90:20:17:7b:6b:86:cf:cc:38:c0:11:61:
                    5c:01:74:9a:ba:b9:cd:51:9f:75:3e:b0:72:d6:f2:
                    3e:a9:37:f7:d3:88:8e:9a:20:89:bd:d1:5b:a0:c3:
                    f0:7c:4a:95:32:b4:ac:75:29:28:83:85:67:1c:0e:
                    99:ca:e7:05:f4:00:f7:a5:48:e1:29:22:8a:12:14:
                    10:87:2d:37:5e:b6:67:da:c5:ef:7f:e8:41:f0:fa:
                    5b:3a:d8:a3:01:59:ec:72:89:46:49:aa:4d:7c:0c:
                    c6:15:cb:24:d1:6e:63:9f:39:52:d2:1a:c3:7d:e2:
                    43:6f:61:45:a2:f5:73:15:5f:36:70:04:39:4d:5e:
                    43:03:13:7e:e4:3f:0e:6b:f5:e2:c2:25:45:ad:8f:
                    73:d5:e7:80:6f:4b:3c:85:f8:df:b8:a5:37:65:2c:
                    6c:66:f3:f2:c3:c3:17:40:fa:d1:f5:8a:73:d0:be:
                    04:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C4:EF:A6:B0:13:57:69:65:8A:C6:17:04:06:83:4B:84:06:4C:EE
            X509v3 Authority Key Identifier:
                keyid:D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/D87CF411D142A7A1AEFCFC3CDDEBCE3DD2DF7A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a6666303a3a2f34382d3438203d3e20313337393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd60:ff0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:35:71:57:1a:f8:21:97:ea:a1:6c:58:3e:37:fa:00:00:06:
         c1:ce:d7:ee:22:53:de:4f:b8:0c:be:dc:94:e6:6c:6b:8f:f5:
         50:f6:f1:a7:e0:c5:36:5d:4f:bb:97:e3:de:6f:60:6c:79:fa:
         da:de:cc:c0:4b:1d:d8:a1:24:ec:ec:53:60:e6:45:ac:43:ff:
         67:95:9b:32:8a:30:93:0a:38:53:98:62:41:b8:b0:8c:36:75:
         50:a8:eb:2c:81:81:ea:50:a1:55:f9:e3:d9:26:9b:22:76:50:
         5b:3d:67:4e:77:ad:b2:ed:af:32:f1:74:06:c7:29:4f:6b:80:
         f9:0b:d2:53:4c:66:66:38:8d:9b:23:a6:26:a5:ac:e2:b0:56:
         0d:4a:31:22:9a:4c:c3:36:9c:d2:d2:f9:85:3b:73:7a:9b:99:
         8a:e4:2c:5d:75:b4:25:3c:36:97:49:59:5a:3f:83:b1:4c:05:
         05:ba:7d:c0:85:2b:07:d9:f4:61:12:16:05:0d:76:60:33:24:
         86:c0:2a:40:de:7c:e5:b9:7b:49:ca:cb:87:78:1e:f1:33:c5:
         e7:49:03:fa:dc:00:63:4c:ee:ef:df:89:ee:45:39:f2:bb:5d:
         64:5a:de:69:5c:97:c4:d4:83:22:6b:d7:b1:3c:53:7d:ff:9f:
         1e:ce:d7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----