This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8adebea5-43f4-4b9b-8b13-f39f6e98a3ad.roa
File:                     8adebea5-43f4-4b9b-8b13-f39f6e98a3ad.roa (raw, json)
Hash identifier:          PtP/GqVp9enYZkd4Pb9BmsDPEw2HHzCCoYfK0dV+YuA=
Subject key identifier:   6A:19:63:E5:D3:C1:67:4B:1C:39:2A:62:2E:98:3D:35:C8:10:3C:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       61B450BF48E34E160A12F9F2A3F9739E16B6F867
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8adebea5-43f4-4b9b-8b13-f39f6e98a3ad.roa
Signing time:             Thu 13 Nov 2025 00:21:31 +0000
ROA not before:           Thu 13 Nov 2025 00:21:31 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.87.29.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b4:50:bf:48:e3:4e:16:0a:12:f9:f2:a3:f9:73:9e:16:b6:f8:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:21:31 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=6aa3fe4e04b34e44dbec78a032e16f5b0e90b26af71b00e785fc152babc2665d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:10:b6:f4:37:ab:24:d4:f1:62:9f:f0:58:
                    ce:f8:43:2b:a7:23:28:22:d2:36:e1:46:82:a7:f3:
                    46:8f:29:9c:0e:a7:37:71:ee:bd:6f:97:eb:6a:0c:
                    83:fb:75:10:27:a5:c0:0d:77:8a:5e:6e:48:2a:5a:
                    71:7e:2a:5d:21:9c:7f:14:eb:45:a3:fe:fc:af:9b:
                    dc:6c:89:08:fb:0b:96:70:13:3f:0c:a0:1d:0a:bf:
                    17:e8:c0:a0:7a:7d:ac:71:a7:73:c3:18:22:19:51:
                    06:d3:fe:4d:e9:ce:67:df:26:2b:be:45:46:31:0f:
                    45:42:be:ec:80:13:26:1f:da:85:4a:ca:fc:c5:ba:
                    0c:53:20:6e:e0:1b:56:2b:89:31:7a:fb:d1:fa:44:
                    77:0a:61:51:ff:57:67:42:17:16:c8:af:77:1e:e9:
                    be:87:3d:e7:7a:2f:51:e6:3d:04:31:83:aa:5d:76:
                    76:74:ce:65:f0:8c:82:06:c3:da:05:af:6b:10:f0:
                    9e:61:d3:73:7d:62:be:85:92:79:90:e8:7b:f5:fb:
                    59:13:68:60:2f:73:6d:a2:09:3e:09:dd:96:10:7e:
                    c6:f0:dd:3c:09:9a:9d:69:78:6c:19:ef:f6:98:fa:
                    71:53:02:7a:a4:c0:a5:1d:07:f3:e1:d1:fc:f5:75:
                    fc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:19:63:E5:D3:C1:67:4B:1C:39:2A:62:2E:98:3D:35:C8:10:3C:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8adebea5-43f4-4b9b-8b13-f39f6e98a3ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:64:e9:33:39:50:61:52:07:82:ea:88:06:d4:bb:13:5f:ac:
         06:97:59:60:84:ec:66:33:5f:9a:20:24:c5:c4:09:20:79:d9:
         56:e4:43:a0:35:21:f5:18:ab:0f:87:2f:2f:a7:16:73:9c:58:
         00:3c:c2:a9:49:3d:31:78:1f:58:66:67:a6:85:68:6c:33:7b:
         41:c5:72:ee:15:e3:d9:b4:a7:ae:87:0e:78:cb:9a:d6:da:3e:
         c1:83:c6:32:bd:5a:c9:01:bb:8d:44:0d:c5:ec:10:b5:00:04:
         12:1a:6a:f1:a9:19:7f:b2:03:b5:02:20:0f:49:99:b3:4d:51:
         dd:cf:f9:5d:12:79:d7:19:5b:57:e5:7f:9b:2c:b9:ed:40:5b:
         f9:43:f2:fd:bd:32:d1:29:07:ae:a1:f6:2a:36:82:28:40:4d:
         02:c4:4c:55:e5:cf:49:b3:c5:3f:f5:6c:6f:95:04:ec:16:dd:
         20:95:7b:13:a8:a3:f0:a1:92:90:5a:8d:49:73:11:d1:c3:41:
         6a:3f:c8:3e:b2:0c:1e:e4:4d:bd:8f:76:1d:d0:46:03:f3:0c:
         dc:ab:77:66:35:46:ca:5b:1b:41:d4:ef:67:fb:3e:4d:cd:51:
         eb:2e:38:32:02:a1:75:d2:fd:c5:8c:1b:3e:37:da:65:49:26:
         ed:6f:a5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----