This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65ef93f7-3f39-40f5-adfe-db14d9869bc6.roa
File:                     65ef93f7-3f39-40f5-adfe-db14d9869bc6.roa (raw, json)
Hash identifier:          ynIGYQ2trMgqnpqpEchJynGUjIv0Ww2ttpXGj3b+fk8=
Subject key identifier:   F4:AB:A3:1F:FE:03:1A:9F:C9:B0:38:C7:77:3E:5E:D9:E1:AF:18:69
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       06E01A18DBD0668294630AE87BE25451C1176C6F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65ef93f7-3f39-40f5-adfe-db14d9869bc6.roa
Signing time:             Tue 11 Nov 2025 01:41:22 +0000
ROA not before:           Tue 11 Nov 2025 01:41:22 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f00:8150::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e0:1a:18:db:d0:66:82:94:63:0a:e8:7b:e2:54:51:c1:17:6c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 01:41:22 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=4fc179be971aa015a0d37287c4dbecf9291f043c5546094a02ebf47bf72dfcf2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:2c:70:95:a5:e8:e3:2e:10:6f:b0:15:f8:
                    07:fe:21:2b:2f:c3:1a:12:43:e7:cf:11:f0:79:6e:
                    75:f2:31:7c:8d:2b:a3:25:9a:30:55:a9:41:10:ba:
                    82:e3:70:09:e5:df:e5:51:8c:73:ff:2f:50:99:28:
                    8f:8f:1e:53:f6:0c:e5:2e:87:73:53:a7:35:8b:55:
                    11:44:ad:90:6a:a2:7a:97:ae:85:ca:bc:3e:4e:0d:
                    d2:da:66:40:b6:dc:d7:03:30:6f:4f:a7:42:31:5a:
                    10:2e:35:99:27:6f:c2:e9:52:2f:f1:e2:74:2b:db:
                    a4:66:94:56:26:6e:91:09:79:8c:08:6a:06:93:33:
                    12:90:d7:fa:c7:d6:de:4b:b2:d6:87:18:e4:d6:48:
                    05:f5:96:dd:8e:24:55:d2:a9:7d:cc:1a:d4:94:e7:
                    10:9c:7d:1e:5a:74:86:37:8b:35:19:18:03:8f:48:
                    f5:53:03:27:a2:5a:bc:bd:61:b1:07:c4:c9:13:1a:
                    14:1b:35:e6:ca:89:88:77:84:7f:0a:99:3a:8f:0d:
                    f3:94:9d:bf:c3:c3:15:8a:78:53:65:74:10:62:39:
                    1d:48:24:c5:69:96:45:f4:2c:f6:c6:4c:e4:35:ce:
                    05:d7:7d:b6:d6:a8:5a:01:69:66:ef:cf:34:6a:fb:
                    74:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AB:A3:1F:FE:03:1A:9F:C9:B0:38:C7:77:3E:5E:D9:E1:AF:18:69
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65ef93f7-3f39-40f5-adfe-db14d9869bc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:8150::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:54:22:19:b1:9d:33:17:74:1a:f3:a4:8d:e2:e6:2c:6e:ea:
         0d:cb:e0:23:09:dd:fa:43:c4:e8:b4:ea:2b:cc:57:3d:72:b7:
         b6:d5:d5:89:be:91:67:af:e6:8a:c3:9f:a6:48:0b:68:74:2f:
         3a:70:2c:f4:0e:12:39:89:68:3e:92:c6:e0:2d:8e:86:a1:9c:
         76:8d:e9:61:4b:6c:42:9e:22:c2:31:41:0a:8d:62:77:b8:08:
         0a:4e:81:cf:10:73:2d:8c:73:fd:5b:76:3f:86:fa:08:94:0d:
         65:6e:97:39:8c:8a:70:70:ce:10:88:c2:70:8d:18:34:c4:83:
         55:2f:0d:c5:cb:9d:1e:c2:15:be:8c:3a:2b:cd:e6:d6:53:fd:
         81:b2:87:0f:f3:a2:47:1a:af:8a:c0:1a:1e:9a:d4:af:14:96:
         bb:8c:71:80:8f:32:4e:d2:9c:b6:15:5b:1f:52:2f:df:e4:97:
         0f:17:92:47:0c:ba:49:80:9e:e2:e5:48:b8:f1:ee:c1:78:04:
         60:f3:2e:9d:78:54:8c:44:ee:29:1e:21:c4:0b:ac:d1:a9:84:
         de:29:d0:c2:eb:f9:46:a3:c3:7c:0e:29:f8:8e:0d:a0:96:7a:
         c9:25:39:49:af:3e:41:84:7f:29:35:09:30:b4:56:a2:44:8f:
         17:a8:3e:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----