Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a6666313a3a2f34382d3438203d3e20313337393038.roa
File:                     323630323a666436303a6666313a3a2f34382d3438203d3e20313337393038.roa (raw, json)
Hash identifier:          OwEtzxhifOjpMbcVfOLsAIWhhmeqzspMSQxkLTJfjpY=
Subject key identifier:   61:55:ED:6B:1F:0E:5D:8A:BD:BF:59:69:0F:17:6D:40:AE:3D:40:4D
Certificate issuer:       /CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
Certificate serial:       30FF81ED31CEF763DE6224EF317EA48040C1C3CF
Authority key identifier: D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a6666313a3a2f34382d3438203d3e20313337393038.roa
Signing time:             Tue 26 May 2020 21:19:58 +0000
ROA not before:           Tue 26 May 2020 21:14:58 +0000
ROA not after:            Wed 26 May 2021 21:19:58 +0000
asID:                     137908
IP address blocks:        2602:fd60:ff1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ff:81:ed:31:ce:f7:63:de:62:24:ef:31:7e:a4:80:40:c1:c3:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50
        Validity
            Not Before: May 26 21:14:58 2020 GMT
            Not After : May 26 21:19:58 2021 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:73:2e:99:51:57:3d:bd:46:30:03:32:dc:
                    e7:8a:92:9a:7b:f2:9a:c1:f0:48:5f:92:11:c4:08:
                    b5:ea:b0:1f:96:32:71:af:64:e4:8f:b7:b0:59:6f:
                    aa:10:d7:a7:45:2c:0d:25:f0:cc:07:10:a8:2f:c8:
                    e6:fd:e0:2d:5f:08:c9:a0:08:7b:73:39:cb:3a:0e:
                    c6:54:11:c5:ab:84:d9:cf:38:17:f2:69:fd:16:14:
                    d8:9a:03:98:da:af:85:2d:ce:e9:c4:a1:30:db:38:
                    56:76:8e:b7:19:94:d9:2d:62:80:e5:78:6c:a5:cc:
                    47:0b:ec:d9:ad:b4:cf:ff:00:88:3d:e4:59:e3:19:
                    64:2e:5f:15:5b:69:1d:17:48:56:00:d0:0b:83:f2:
                    fb:0f:59:9c:74:93:f2:a0:83:9b:64:5c:9a:43:b6:
                    70:bd:dd:4b:8a:79:50:b5:7a:23:d6:fd:94:1e:0d:
                    e5:53:51:cc:a4:64:9f:ac:7b:9c:e8:5e:95:21:9f:
                    fd:9c:1c:63:71:56:a4:bd:4d:5e:91:5b:6a:1e:b6:
                    1c:a4:96:cc:94:18:f1:cd:65:3c:b8:32:91:36:2c:
                    0e:79:39:b6:0e:51:61:58:8b:e3:3f:f1:32:2c:63:
                    20:8d:fa:d9:e9:5b:14:2c:8d:e2:48:71:d0:49:d5:
                    ff:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:55:ED:6B:1F:0E:5D:8A:BD:BF:59:69:0F:17:6D:40:AE:3D:40:4D
            X509v3 Authority Key Identifier:
                keyid:D8:7C:F4:11:D1:42:A7:A1:AE:FC:FC:3C:DD:EB:CE:3D:D2:DF:7A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/D87CF411D142A7A1AEFCFC3CDDEBCE3DD2DF7A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d4636abd5c94a5bdaee22f409278feed6854504ebc50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-CA/0/323630323a666436303a6666313a3a2f34382d3438203d3e20313337393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd60:ff1::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:24:bd:d3:f4:14:e7:8d:a9:0c:52:7d:32:a2:49:18:0f:cc:
         0b:ed:f4:50:18:c9:9f:8f:ba:af:95:8c:84:56:1f:5d:01:c1:
         89:ae:2a:a3:63:51:a4:f2:5e:9e:74:66:86:29:17:80:47:97:
         0b:22:71:3e:a8:21:06:32:c1:db:0d:6f:45:8d:57:f0:19:59:
         4b:77:2f:5a:d8:03:c9:99:11:59:73:c2:30:cd:09:22:96:12:
         17:9f:b9:b1:04:0d:41:38:b2:94:4b:97:a3:a4:81:6a:e0:da:
         2b:3b:db:40:bd:76:5c:0f:26:53:6d:20:fb:ef:0a:4a:5d:b3:
         2a:b6:f8:f8:0d:df:e6:0c:f9:da:22:93:4e:d2:dc:56:64:9e:
         a7:12:8e:df:a8:bd:63:a2:c3:24:f3:9f:14:dc:93:38:32:08:
         2e:0f:fb:d1:ff:05:9a:05:cc:52:49:f2:d2:79:6e:2e:8a:8e:
         6a:5e:a5:77:70:28:15:83:cb:41:6f:47:a7:a3:ca:1c:c3:c1:
         03:e5:e4:de:a7:34:8b:ad:41:74:be:fd:ec:ef:4f:c8:c8:e5:
         d9:e8:07:ae:e2:3d:62:43:4b:e6:ad:ff:bd:1b:93:15:9c:36:
         a3:b0:1c:30:64:ba:26:94:ff:51:49:eb:ba:3a:0a:7b:6c:56:
         7d:06:a7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----