Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/323630323a666436303a3a2f34342d3434203d3e20333936353033.roa
File:                     323630323a666436303a3a2f34342d3434203d3e20333936353033.roa (raw, json)
Hash identifier:          q+Z4rlkzqE052FH0hesqnv7bEY3wlIKjX8tvHHz/Ix4=
Subject key identifier:   93:2D:48:13:FD:3D:B1:83:94:76:74:11:58:7D:4D:E2:43:5F:3D:2C
Certificate issuer:       /CN=8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b
Certificate serial:       4FE4965EDBBEF0977FAD3E944C50A73C426B10A8
Authority key identifier: 86:A9:90:76:61:0E:7C:08:AE:DD:CE:87:67:AA:5D:C4:52:8C:49:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/323630323a666436303a3a2f34342d3434203d3e20333936353033.roa
Signing time:             Mon 16 Jun 2025 19:05:49 +0000
ROA not before:           Mon 16 Jun 2025 19:00:49 +0000
ROA not after:            Mon 15 Jun 2026 19:05:49 +0000
asID:                     396503
IP address blocks:        2602:fd60::/44 maxlen: 44
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e4:96:5e:db:be:f0:97:7f:ad:3e:94:4c:50:a7:3c:42:6b:10:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b
        Validity
            Not Before: Jun 16 19:00:49 2025 GMT
            Not After : Jun 15 19:05:49 2026 GMT
        Subject: CN=932D4813FD3DB18394767411587D4DE2435F3D2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:51:f1:d8:0b:66:c7:7e:52:6f:88:50:75:
                    f0:e9:c7:a4:76:48:83:19:8e:d7:0b:39:32:7c:4c:
                    da:c7:06:53:31:62:2a:97:58:09:8e:16:38:e0:cf:
                    1a:78:9a:86:f7:e5:32:e9:bf:56:93:05:f8:69:71:
                    00:40:a3:72:5f:5a:4d:0e:0f:6d:63:1f:3a:16:0b:
                    ab:fa:cc:94:2f:6b:b8:25:e3:bf:d7:fe:12:bd:3e:
                    1d:e6:d6:66:da:d8:15:da:d1:7a:0e:1a:1c:56:9b:
                    93:7d:82:7d:98:84:d2:0b:f7:c8:ab:9c:b5:1d:58:
                    ae:2b:2f:99:cc:7a:35:12:65:b6:cf:bc:ea:c0:d4:
                    a9:6b:cb:0d:db:0b:2d:2f:aa:24:5a:a5:ce:2a:f7:
                    64:87:a2:95:ab:94:0d:9e:06:33:73:b8:2f:ff:af:
                    38:3a:7f:b3:7c:70:8f:fe:0b:67:89:43:ef:f9:53:
                    6e:18:bf:c3:68:8a:8b:1a:d9:47:3e:73:6a:ec:3c:
                    41:5d:8b:7a:ff:fd:2f:08:70:e0:ab:bd:e0:3d:a2:
                    e0:78:88:d9:71:eb:ec:08:73:c5:1c:ba:53:c1:e6:
                    00:fa:2e:8d:4c:27:70:14:16:5e:bf:74:be:03:7e:
                    31:54:58:06:85:c4:71:d1:21:1d:d2:e2:e6:26:c4:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2D:48:13:FD:3D:B1:83:94:76:74:11:58:7D:4D:E2:43:5F:3D:2C
            X509v3 Authority Key Identifier:
                keyid:86:A9:90:76:61:0E:7C:08:AE:DD:CE:87:67:AA:5D:C4:52:8C:49:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/86A99076610E7C08AEDDCE8767AA5DC4528C4908.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/323630323a666436303a3a2f34342d3434203d3e20333936353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd60::/44

    Signature Algorithm: sha256WithRSAEncryption
         b9:8e:26:9f:87:6f:7c:68:11:fb:66:72:d1:f8:2a:c9:af:a2:
         3e:e3:6e:5c:58:5f:0d:d7:0a:82:21:cd:b8:85:6b:3f:15:69:
         02:68:9f:a3:e0:b4:1e:b9:63:af:ca:44:73:a5:af:83:e5:68:
         ac:90:14:5a:80:b1:fe:b4:1c:3d:d5:47:7a:7f:f2:dd:2b:d1:
         54:56:6a:54:3a:17:9f:b9:3d:43:37:ef:4d:c6:30:cc:16:b4:
         45:ef:1f:dc:c8:2d:6e:2f:d9:79:79:15:9f:97:b3:99:f0:10:
         61:2d:d4:a6:e3:2e:83:4d:c5:95:72:5e:db:f8:31:15:3a:a8:
         5e:81:6b:97:fb:71:8c:a1:c4:ee:17:f6:2c:f9:37:8d:a4:65:
         ba:e0:d6:df:b1:8a:20:9c:42:09:79:5b:e1:18:63:94:1c:77:
         3c:98:31:17:41:a9:41:19:7b:8f:e0:cb:4e:24:18:79:49:8d:
         99:41:ac:95:a6:9d:d2:3c:95:85:1f:d7:ec:92:25:5a:4a:2e:
         b0:f0:c8:ec:a0:1c:46:e6:60:87:9b:2e:54:ef:40:c4:0f:9a:
         40:9e:10:48:4a:52:07:99:48:77:aa:cc:10:a8:dc:df:40:65:
         aa:a8:43:1f:4c:e5:a1:a6:b3:3a:5a:43:30:5d:70:74:f1:18:
         2b:ef:00:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----