This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa
File:                     44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa (raw, json)
Hash identifier:          xCy6rSdUiskJQZ3dp0vyxO65M9tN4eYoiltRwL7GTy0=
Subject key identifier:   00:18:06:25:44:90:BC:24:FD:57:DD:2D:15:E7:E2:54:9C:82:B6:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       09D526F7CDF045815373FE99B6F8FAA1412698E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa
Signing time:             Thu 13 Nov 2025 00:10:10 +0000
ROA not before:           Thu 13 Nov 2025 00:10:10 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        16.101.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d5:26:f7:cd:f0:45:81:53:73:fe:99:b6:f8:fa:a1:41:26:98:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:10:10 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=c4e75f025a80dcaeed48c4e5b10f69fa7cb5fee6c85a758faf6878aca58d0bac, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:c8:00:84:c6:f6:e1:4c:82:5f:f9:5b:e4:
                    ef:1d:94:63:49:8b:33:d1:83:a2:e8:4c:a3:a1:40:
                    c0:40:5f:31:38:91:0f:7a:24:61:f1:e5:18:eb:07:
                    ad:1a:15:35:71:9e:18:ea:dd:3b:1b:42:6c:b5:99:
                    fe:a0:f7:6f:1f:e2:f5:2c:75:28:d3:5d:30:84:f9:
                    ce:78:aa:68:37:40:7c:e4:f6:f6:4f:89:5c:48:56:
                    1d:9b:d7:30:50:4b:92:47:dc:14:33:a1:04:d8:c3:
                    78:e6:99:ba:8e:84:93:24:02:f2:c0:d9:68:91:a3:
                    35:8b:12:cb:02:d5:3c:a7:87:26:a7:ec:bf:8e:74:
                    a7:d2:dc:3a:68:f0:ae:26:38:7c:f2:b8:11:49:18:
                    bc:f0:15:54:36:8e:73:89:f3:73:62:00:3c:fe:8e:
                    8c:2e:9b:54:5b:14:a4:bf:cb:24:c0:d6:7e:86:a9:
                    17:61:13:c7:d2:a6:a6:2f:49:f6:b1:7f:69:4e:b3:
                    78:af:68:51:f2:a5:ae:02:97:55:d6:e4:58:02:51:
                    21:c1:bb:55:57:27:f2:a0:d9:26:0e:f3:e1:27:4d:
                    23:c0:a1:81:89:ad:3d:42:fb:37:17:53:ff:28:77:
                    0f:ea:b4:0d:5b:90:22:86:53:08:0f:93:31:47:77:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:18:06:25:44:90:BC:24:FD:57:DD:2D:15:E7:E2:54:9C:82:B6:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44eb68fd-9c03-4170-84e4-dbbca6952cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:52:5f:0d:11:c5:8f:6d:d1:b5:14:e6:93:bc:45:64:de:85:
         40:ff:82:e0:1d:c3:1c:f4:66:b0:77:22:c1:0d:1c:a2:13:fe:
         cc:01:b4:5b:3d:2a:86:ae:80:9e:0f:e5:de:3b:d7:28:55:df:
         90:38:06:51:91:0b:e9:12:61:88:05:bf:6a:47:a8:ad:16:ea:
         be:f6:4b:ee:c4:c0:7b:d6:51:71:45:65:82:2d:53:cc:36:0a:
         29:41:f8:bb:bb:b3:fd:2c:c3:0e:0c:6f:ad:e1:2a:45:88:a2:
         55:4f:28:8d:b1:5b:17:b7:67:06:f6:0e:ca:69:10:b2:96:22:
         33:c0:53:c3:34:8a:78:c5:f0:bb:89:66:51:0e:cd:f4:75:cb:
         dd:75:9a:85:d4:9a:2b:05:4a:66:66:cd:a3:83:52:92:24:cd:
         ad:bb:82:76:22:f7:05:10:bd:13:b4:db:b5:45:6d:61:2d:3c:
         c7:f5:d9:72:81:7f:82:98:1f:77:ad:9a:0a:f7:3b:d7:41:b9:
         26:17:fa:e6:2c:4a:3c:8b:47:c5:6a:83:aa:76:8a:22:32:49:
         a5:76:98:01:a1:c3:d7:42:8a:1e:95:48:3c:87:9b:86:cf:63:
         54:41:6a:4b:ce:4b:c0:83:e2:b9:5b:48:da:55:63:65:cd:84:
         37:21:2e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----