Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a6666323a3a2f34382d3438203d3e20333936353033.roa
File:                     323630323a666436303a6666323a3a2f34382d3438203d3e20333936353033.roa (raw, json)
Hash identifier:          0HUOrujGFYuXTD5V2GvoxXDG59IViWiLx0e9qGCFlGA=
Subject key identifier:   CA:24:59:E2:C1:E6:F7:EE:8F:2A:74:4D:8E:06:13:DD:9A:23:1D:EC
Certificate issuer:       /CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
Certificate serial:       57F79873B8D4D1703B5C013D0AE15E2EC3BC4487
Authority key identifier: D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a6666323a3a2f34382d3438203d3e20333936353033.roa
Signing time:             Sun 11 Oct 2020 15:37:23 +0000
ROA not before:           Sun 11 Oct 2020 15:32:23 +0000
ROA not after:            Mon 11 Oct 2021 15:37:23 +0000
asID:                     396503
IP address blocks:        2602:fd60:ff2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f7:98:73:b8:d4:d1:70:3b:5c:01:3d:0a:e1:5e:2e:c3:bc:44:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
        Validity
            Not Before: Oct 11 15:32:23 2020 GMT
            Not After : Oct 11 15:37:23 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:41:79:c6:18:96:e0:64:8b:21:5d:06:73:
                    74:8b:a2:9e:ef:57:89:a4:30:ae:fb:7b:ac:ed:48:
                    de:27:ec:4d:3c:b1:62:6c:0c:80:f7:37:c3:ec:48:
                    02:fe:5d:c6:b1:da:30:5e:fb:41:9c:54:b4:a9:f3:
                    ce:c9:60:67:f1:4d:d8:fe:8f:ee:6b:c9:34:c1:7c:
                    b5:ca:92:dc:bd:72:af:7c:b0:af:bf:fb:52:a7:55:
                    3e:c6:b5:0e:8c:17:76:be:74:01:b7:16:0b:4d:69:
                    9e:99:4e:1b:de:53:8e:d6:0a:65:c8:a6:9c:ae:38:
                    03:8a:7f:66:be:a7:18:10:c8:7d:b7:21:36:07:ae:
                    7b:eb:ff:98:98:e9:48:04:a4:69:4d:25:3e:06:16:
                    e2:c9:4f:93:6f:75:b2:52:4a:3a:05:44:0a:f7:37:
                    79:c3:8e:92:62:4f:ab:4d:33:7a:79:c5:16:8c:fb:
                    2a:34:04:f8:d3:74:28:f7:9c:b8:b0:66:fa:8b:d8:
                    7c:25:83:c5:82:60:58:96:39:8d:b5:fc:42:36:2f:
                    78:02:13:4d:b3:d8:22:93:48:3b:3f:fc:45:8e:1e:
                    e7:dc:7b:9c:74:15:9c:d7:08:36:0f:f1:19:53:2a:
                    da:1d:f9:bd:97:76:0a:3d:53:ae:e4:54:81:6d:30:
                    cf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:24:59:E2:C1:E6:F7:EE:8F:2A:74:4D:8E:06:13:DD:9A:23:1D:EC
            X509v3 Authority Key Identifier:
                keyid:D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/D87CF411D142A7A1AEFCFC3CDDEBCE3DD2DF7A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a6666323a3a2f34382d3438203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd60:ff2::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:bc:c8:93:98:5b:9d:ce:cd:2c:2e:16:c3:c5:f9:6d:82:ac:
         3c:4b:3f:84:b6:ba:98:65:fc:93:c9:86:6e:07:83:0c:f5:6e:
         96:30:ac:93:af:64:c4:da:6a:b6:7e:1d:48:b6:f6:73:e3:04:
         83:8b:49:77:7d:97:20:50:b2:47:2a:a7:94:8d:f9:ab:ce:f3:
         75:aa:35:68:73:c0:b9:df:5f:6a:d3:e4:ed:74:35:c0:13:ae:
         ac:ed:d1:90:ba:02:f0:82:f9:84:25:5a:0d:c8:8d:32:59:bc:
         2e:65:9d:8b:cc:66:e0:2d:da:52:1b:c1:8f:1d:cb:51:97:83:
         a7:b2:31:63:14:f2:0f:ff:11:01:70:fe:41:28:f5:3c:58:05:
         98:a1:b8:50:f0:37:1e:78:aa:d9:c2:17:56:9d:35:60:3d:3c:
         45:28:74:0e:a0:96:c6:92:8d:e0:0f:89:8d:c1:df:7b:39:c6:
         d8:27:70:01:70:9d:39:74:05:4c:9f:6e:b1:2e:7c:6f:ad:52:
         5a:61:75:b6:68:73:ea:6a:7f:0a:64:ca:f4:ec:80:32:60:4f:
         d8:f4:d1:82:c6:aa:96:3c:d3:a2:ef:38:6c:7c:fc:5f:77:1d:
         4d:6b:b3:e7:99:69:3d:43:55:bc:e4:2d:9c:44:ca:9b:b5:66:
         3a:84:86:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----