Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/3135382e35312e3131332e302f32342d3234203d3e203533333536.roa
File:                     3135382e35312e3131332e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          JvcA1cXIYmXKlsywq/tCXPnhFuAEUQcYo8ErGgbi6BM=
Subject key identifier:   F6:1B:AA:FF:92:F8:52:62:9B:CE:18:67:CD:61:D0:26:DF:71:24:94
Certificate issuer:       /CN=8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b
Certificate serial:       7A0A84FC4D44195BA76C0F925E9491887E95E01A
Authority key identifier: 86:A9:90:76:61:0E:7C:08:AE:DD:CE:87:67:AA:5D:C4:52:8C:49:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/3135382e35312e3131332e302f32342d3234203d3e203533333536.roa
Signing time:             Mon 12 Sep 2022 17:57:56 +0000
ROA not before:           Mon 12 Sep 2022 17:52:56 +0000
ROA not after:            Mon 11 Sep 2023 17:57:56 +0000
asID:                     53356
IP address blocks:        158.51.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:0a:84:fc:4d:44:19:5b:a7:6c:0f:92:5e:94:91:88:7e:95:e0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b
        Validity
            Not Before: Sep 12 17:52:56 2022 GMT
            Not After : Sep 11 17:57:56 2023 GMT
        Subject: CN=F61BAAFF92F852629BCE1867CD61D026DF712494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:06:bf:fb:c6:7b:9d:ca:4a:2a:dd:79:4d:
                    bc:aa:80:18:e8:93:39:e4:f5:8a:58:81:a7:51:ca:
                    6f:9e:8f:ba:4d:49:bc:00:6b:35:4b:ae:b2:6d:6f:
                    01:ab:3d:5b:ed:0f:91:3d:db:66:4f:d2:57:80:a0:
                    83:b9:68:f0:5e:f3:8e:2a:89:bd:a5:7c:66:c9:d8:
                    49:37:60:30:3d:30:f7:03:16:3e:1a:39:c1:de:b3:
                    d6:0f:13:9d:fc:06:1d:4f:5c:91:44:57:d6:a3:1b:
                    c5:40:d0:71:bc:33:b1:9c:dd:5a:b1:61:82:07:a6:
                    6e:ef:a5:3f:d1:84:b8:be:f0:cf:1c:8d:eb:2e:84:
                    27:b9:80:94:22:af:8a:a9:53:fa:23:89:02:32:87:
                    4e:43:8b:4f:9d:e0:16:cd:17:85:53:6c:4a:f0:17:
                    23:18:0c:8f:cb:0b:c7:22:e6:9b:aa:57:34:52:4d:
                    b7:ef:1a:c4:40:c1:c0:a8:4f:2d:a7:60:70:1a:ce:
                    13:92:19:19:df:a7:6a:03:1c:dd:0d:0b:f2:db:b7:
                    de:38:bc:80:19:aa:87:7e:eb:d7:3e:65:0f:f4:90:
                    72:c2:e2:bb:bb:f7:5f:49:07:53:29:91:20:b3:f6:
                    3c:1f:1a:98:93:31:e2:fe:99:8e:4e:dd:b2:2f:cc:
                    1a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1B:AA:FF:92:F8:52:62:9B:CE:18:67:CD:61:D0:26:DF:71:24:94
            X509v3 Authority Key Identifier:
                keyid:86:A9:90:76:61:0E:7C:08:AE:DD:CE:87:67:AA:5D:C4:52:8C:49:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/86A99076610E7C08AEDDCE8767AA5DC4528C4908.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/3135382e35312e3131332e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:6a:2c:73:39:58:03:ef:fe:41:ef:59:91:e6:34:80:b7:8e:
         6a:5e:b6:5c:3f:db:1d:92:11:26:83:8f:9e:d6:f0:26:ef:f6:
         55:36:9f:4f:c9:f7:3e:f3:cc:ee:d1:e3:ce:1b:98:e4:ed:66:
         9c:5d:14:6f:39:30:42:7e:e8:eb:30:9f:e5:68:e4:e9:a8:c1:
         e7:5e:e7:2d:4a:d1:b4:f3:dd:35:ea:5b:7a:00:18:2c:ec:a2:
         b7:b6:ac:23:44:1e:26:6e:24:c7:ce:cd:e1:7e:33:eb:0b:18:
         ba:2e:66:39:e7:d0:cc:4c:d3:88:2f:56:73:7d:22:18:ce:83:
         5c:c6:f2:ac:24:e1:94:9f:80:d4:16:a4:15:68:50:6d:6e:6d:
         c2:a7:87:b6:a4:f9:05:74:b5:9c:f2:c4:ae:18:8c:fb:21:7f:
         7a:47:c0:48:45:4d:df:4d:ce:54:92:a9:b8:3f:48:0a:85:80:
         22:eb:8b:20:be:1f:4f:2d:ce:42:0b:eb:dd:d8:a5:ed:70:e6:
         38:ff:6c:f9:dc:c9:aa:98:a2:de:b5:50:d9:ab:b6:d1:c3:1a:
         78:0e:b6:4d:f4:39:5f:cb:59:b9:c8:35:9a:75:97:25:36:aa:
         11:cc:94:34:b5:4c:69:fa:04:91:58:de:50:74:e0:62:62:88:
         d3:01:ec:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----