This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0deeae0b-5842-4da2-9a82-9e71130af856.roa
File:                     0deeae0b-5842-4da2-9a82-9e71130af856.roa (raw, json)
Hash identifier:          3D2QUHoWsTbdDJOtoV16aZ8dZvOkZ4nFXe/KGFcXWM4=
Subject key identifier:   EF:B6:CE:A8:11:77:8C:0E:23:53:47:DE:8E:65:80:C3:DA:4C:3F:01
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       11295FFE6C5FA17311D66BC622DC66C1D0DAE4C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0deeae0b-5842-4da2-9a82-9e71130af856.roa
Signing time:             Sun 16 Nov 2025 00:30:41 +0000
ROA not before:           Sun 16 Nov 2025 00:30:41 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.30.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:29:5f:fe:6c:5f:a1:73:11:d6:6b:c6:22:dc:66:c1:d0:da:e4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 16 00:30:41 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=5406381b6236e50f0e8de56c3686a39b80543164dbeb3d0e636fc9de97b45b94, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:2b:d4:64:70:e3:c7:06:88:c4:ce:92:90:
                    bb:1e:6a:0c:c0:44:cc:2e:1b:91:99:b0:a0:ce:a1:
                    c7:77:f4:f7:5e:90:bd:07:c6:63:63:c1:c3:9c:77:
                    26:c6:97:52:cf:c6:9a:af:0b:4b:f2:61:b0:e5:03:
                    d1:66:fd:d1:78:91:09:d6:a0:c1:cd:40:0f:fb:fd:
                    38:79:a6:d7:ec:e9:a2:b4:89:ea:6c:51:ee:36:6f:
                    b3:18:5f:a6:d9:22:9e:b0:9b:70:50:63:b3:fe:4c:
                    fc:b8:43:e3:af:11:81:27:0b:ab:15:63:b7:5d:e8:
                    97:06:63:af:ff:c6:44:ec:0c:7e:e8:03:d9:d6:f3:
                    53:d7:33:27:d2:7e:74:b0:ab:9f:a1:d7:8d:61:2d:
                    5e:db:85:39:d3:85:ae:28:47:26:bd:51:c3:1f:ab:
                    8a:4f:fd:c9:77:3d:df:46:16:02:8e:26:2e:6f:28:
                    96:b6:d8:bc:e0:b3:2a:58:a8:67:35:85:8f:d6:1b:
                    05:43:e8:32:b4:b1:3c:21:a4:37:34:86:43:f5:9c:
                    b6:79:3e:d5:90:24:fb:b0:88:3c:00:46:ae:21:c5:
                    50:f2:06:da:33:85:9d:e7:f6:86:f0:52:55:58:d7:
                    a9:2c:6a:7b:4f:1e:95:a8:4c:22:e0:8c:73:3f:a5:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B6:CE:A8:11:77:8C:0E:23:53:47:DE:8E:65:80:C3:DA:4C:3F:01
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0deeae0b-5842-4da2-9a82-9e71130af856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.30.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         bb:84:4a:86:99:4f:d6:8b:de:a0:9e:16:d5:35:08:97:db:52:
         a2:8b:57:d4:1a:f8:9b:5b:bf:ab:f1:6d:9d:61:53:52:c5:f5:
         5c:ba:29:75:4f:3e:9c:75:6f:d1:22:cf:d1:e8:9a:16:46:f7:
         75:9e:14:87:bb:ba:cd:32:83:98:0e:e8:05:de:49:e9:d0:b2:
         c4:0d:e7:8a:d7:ae:ab:3e:f7:a3:70:91:74:b8:7b:5f:c0:8c:
         8f:b2:b4:d4:34:81:da:65:03:59:2a:4b:00:cf:59:e6:fd:4c:
         31:31:d5:ff:d8:b7:b2:1e:75:7e:09:12:8d:d7:a9:e8:bb:93:
         38:ef:e1:9a:04:02:9f:74:86:04:52:cf:09:36:fa:c7:b2:c0:
         ef:33:78:10:a0:78:86:27:49:19:be:ed:6e:07:f1:2f:17:3f:
         b5:0a:c7:62:ef:c2:39:0d:07:69:bc:37:d0:ae:3e:24:48:2d:
         8a:a7:2e:f7:62:03:34:3f:03:3f:85:c6:39:5e:4e:0c:6c:d9:
         8e:a5:eb:2a:b6:11:02:99:4f:87:69:1d:82:00:f8:64:c2:a7:
         4c:b8:3b:96:80:84:50:2c:12:1f:0d:9d:eb:9d:da:e9:86:24:
         38:3c:4e:d3:3d:be:3d:82:16:f6:4a:5e:bc:c5:e5:b7:22:ce:
         22:97:d5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----