Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/323630323a666436303a373a3a2f34382d3438203d3e20333936353033.roa
File:                     323630323a666436303a373a3a2f34382d3438203d3e20333936353033.roa (raw, json)
Hash identifier:          TAHubY+7GFPqIJIlhlmcQzM/eqNRhS0m4z1pEbe1cmQ=
Subject key identifier:   C0:F1:6A:8D:95:BE:AB:A0:96:A3:9C:04:02:65:8A:7D:9E:DE:EE:C4
Certificate issuer:       /CN=8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b
Certificate serial:       2AEA9B91583807D0CBBA0C4F0998FC56E89AAE7F
Authority key identifier: 86:A9:90:76:61:0E:7C:08:AE:DD:CE:87:67:AA:5D:C4:52:8C:49:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/323630323a666436303a373a3a2f34382d3438203d3e20333936353033.roa
Signing time:             Sat 31 Aug 2024 17:08:16 +0000
ROA not before:           Sat 31 Aug 2024 17:03:16 +0000
ROA not after:            Sat 30 Aug 2025 17:08:16 +0000
asID:                     396503
IP address blocks:        2602:fd60:7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ea:9b:91:58:38:07:d0:cb:ba:0c:4f:09:98:fc:56:e8:9a:ae:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b
        Validity
            Not Before: Aug 31 17:03:16 2024 GMT
            Not After : Aug 30 17:08:16 2025 GMT
        Subject: CN=C0F16A8D95BEABA096A39C0402658A7D9EDEEEC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:c5:70:a7:40:0f:fd:8e:61:4f:a9:b4:c8:
                    36:ab:4d:4c:d8:13:80:80:01:9e:fe:32:5a:e2:45:
                    0f:f0:a8:92:4a:23:5d:32:10:12:06:dd:a3:af:f6:
                    1d:d9:e0:7e:47:7d:1c:a3:52:37:23:7a:7d:cd:72:
                    e4:84:ab:14:9a:f1:52:91:58:fe:4c:c1:4c:25:63:
                    45:b0:e2:8e:27:be:5a:5a:d7:57:6a:08:38:ad:8a:
                    b8:fd:02:89:66:e3:2d:6d:ea:dc:53:93:b3:1a:fa:
                    5e:84:33:b6:0d:bd:83:4b:84:13:fa:9d:27:5c:53:
                    2b:0a:2d:24:f1:76:b0:75:ca:68:61:f1:7a:7e:22:
                    e6:8d:14:ac:09:0b:5f:c1:ef:80:a9:f6:e0:d5:20:
                    06:09:a0:19:fd:4a:ea:48:4b:8d:70:ee:c7:c5:f2:
                    ff:17:f3:f8:a2:a4:d5:8f:7e:0e:cd:a2:49:ed:d0:
                    b5:7b:fb:bb:82:ca:18:40:92:be:64:5a:25:74:69:
                    aa:80:7e:3e:4b:a4:e7:64:aa:40:32:2f:b2:e3:cd:
                    3d:2c:79:f2:33:cb:54:a0:ba:c3:67:b7:e8:96:04:
                    e2:86:cd:69:67:23:87:8f:e3:9c:c0:26:81:9e:07:
                    29:14:19:0b:88:20:5e:a7:a0:fe:15:12:19:b8:3b:
                    cf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F1:6A:8D:95:BE:AB:A0:96:A3:9C:04:02:65:8A:7D:9E:DE:EE:C4
            X509v3 Authority Key Identifier:
                keyid:86:A9:90:76:61:0E:7C:08:AE:DD:CE:87:67:AA:5D:C4:52:8C:49:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/86A99076610E7C08AEDDCE8767AA5DC4528C4908.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/323630323a666436303a373a3a2f34382d3438203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd60:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:3b:37:8e:a9:21:91:23:6c:20:69:0e:67:f5:3f:0f:46:29:
         7e:5a:56:40:45:4a:37:b6:0d:f7:be:3e:40:c9:5c:ee:74:bc:
         70:ab:6b:39:ce:32:af:ff:f8:82:db:2f:f3:c6:f5:7d:94:39:
         6f:13:58:69:93:db:85:d8:da:3e:91:cd:22:19:3b:1e:78:d7:
         1c:de:08:8f:4b:70:aa:8d:24:38:ea:49:fd:5d:06:1e:84:85:
         00:a4:58:e4:cb:2f:89:47:e7:26:d6:b1:36:e3:60:a2:a6:46:
         a5:b5:55:24:f8:fd:a7:0f:90:f8:cf:72:f5:9a:dd:34:9a:7e:
         79:86:f9:ff:71:3c:82:ab:d3:3e:7a:f7:7c:be:b5:c7:52:db:
         6a:cc:fe:aa:0e:09:72:b7:68:22:d5:61:30:3d:f6:8c:d0:84:
         76:61:a8:80:54:2f:7c:47:d0:8b:be:5d:86:3b:b0:1d:ab:08:
         3d:54:62:3c:99:85:20:aa:09:23:78:4a:75:38:d7:59:b8:32:
         3b:dc:0b:d3:55:05:41:e0:96:b9:2d:8d:37:fa:f6:72:33:52:
         dd:80:eb:f1:6d:ff:3f:e5:0d:8e:5a:32:46:2f:91:c3:ca:f8:
         e7:52:90:50:2e:1e:d3:1e:fb:04:06:5b:fe:80:1e:2b:12:02:
         aa:bd:8e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----