This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06b5393e-1e06-41e3-8d8b-b831295e50f3.roa
File:                     06b5393e-1e06-41e3-8d8b-b831295e50f3.roa (raw, json)
Hash identifier:          pTMc5T/rGxZRgc6DPKW9v4clOofM1aaam2rZZYLEASc=
Subject key identifier:   43:A0:A1:C2:81:8F:17:D9:A3:A2:EC:0E:CF:A6:A8:55:C6:75:E0:39
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3E231098D023F5EE9328A6D8EB74098F5C55965F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06b5393e-1e06-41e3-8d8b-b831295e50f3.roa
Signing time:             Wed 12 Nov 2025 01:40:48 +0000
ROA not before:           Wed 12 Nov 2025 01:40:48 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f19:4800::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:23:10:98:d0:23:f5:ee:93:28:a6:d8:eb:74:09:8f:5c:55:96:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:40:48 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=cc0656a193e714b8bd89c4809c63469a76c6f734e02a886704b5d1a7aa7e9e5f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:ee:6e:bd:34:e4:ef:c3:24:bc:3f:2f:4b:
                    77:61:8f:9d:8f:e6:05:25:eb:f9:64:09:0b:7f:6b:
                    22:aa:1a:bc:ca:ae:86:29:50:61:a6:76:25:69:34:
                    03:fb:17:26:58:4b:25:6c:a5:be:be:3e:7d:40:7e:
                    96:a7:b3:bc:30:39:ff:11:43:6c:0c:07:0a:51:db:
                    28:d4:7b:12:3d:36:9c:fb:3e:a9:3c:2d:c9:b2:9d:
                    bb:17:09:01:d9:47:4c:d9:47:0a:35:6f:08:39:b0:
                    31:3a:6b:0b:13:fd:3f:24:40:29:42:bb:68:68:dc:
                    ad:c0:11:bf:f4:00:31:80:4d:f0:de:d6:0e:a9:7c:
                    0d:1f:d7:ba:1f:09:60:74:5a:6e:69:f9:7e:98:63:
                    bf:83:04:31:e7:70:b8:33:78:a0:6d:80:a6:5f:f5:
                    74:f0:8b:dc:4e:36:3e:e9:27:ed:d2:99:e2:4e:e6:
                    1c:38:aa:d0:41:bc:82:77:11:de:e4:0c:fa:22:2a:
                    c0:e3:c9:1b:3a:c6:40:d2:d5:13:f7:02:48:c2:b7:
                    0d:af:4e:1e:16:bc:14:fa:ff:05:e2:87:dd:50:86:
                    7c:47:66:0f:d2:e9:41:13:1b:59:c8:be:e3:87:9c:
                    1a:3a:9c:04:cb:bd:c4:1a:84:b9:03:c8:66:06:70:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A0:A1:C2:81:8F:17:D9:A3:A2:EC:0E:CF:A6:A8:55:C6:75:E0:39
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06b5393e-1e06-41e3-8d8b-b831295e50f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f19:4800::/37

    Signature Algorithm: sha256WithRSAEncryption
         61:fd:34:f5:da:0e:30:90:d6:dc:ff:31:d9:68:5f:93:c0:5e:
         ef:e5:eb:ba:2c:04:b6:df:f6:62:ff:81:87:05:76:5f:89:cf:
         05:dc:82:98:bb:79:d8:11:12:0d:bb:b3:74:e8:1d:04:47:59:
         f6:06:34:93:9a:de:f2:a2:89:99:52:f5:ad:52:64:01:81:6a:
         13:9c:5c:04:31:ec:64:67:71:b6:92:27:a8:87:c2:e1:c2:55:
         c6:f1:0e:ce:1d:16:89:21:b7:6e:fe:e5:b7:ae:98:38:2b:56:
         d6:ff:46:a3:ab:72:a2:0d:7d:8f:80:49:49:8e:e0:8b:bf:ac:
         ae:9c:e3:b6:13:20:3a:e9:ad:83:6b:62:56:7e:4a:62:ec:c0:
         54:a2:1a:17:5d:d8:b5:b3:2e:62:5a:8e:a8:20:b0:35:ff:bd:
         8d:9d:e4:55:6e:43:41:a0:91:a7:b9:c0:e2:cd:0f:9a:22:e1:
         8c:67:4b:3c:47:f8:72:45:73:f2:a7:88:f6:0f:ab:70:d5:61:
         a9:de:d4:22:3a:89:27:62:47:91:da:fb:2d:81:7c:98:32:58:
         56:c5:00:bb:57:43:d8:7a:95:85:f2:ff:49:66:d5:33:11:16:
         fa:4a:b1:33:3a:ad:15:fa:3d:05:5a:a7:1a:3a:08:fb:06:47:
         c8:70:b4:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----