This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fe6112e-56ff-4eca-954b-97c575f347ed.roa
File:                     0fe6112e-56ff-4eca-954b-97c575f347ed.roa (raw, json)
Hash identifier:          YcPejJXh4UoOMNJbsKkTlM2k9M6XK0CwHKc/sV60QgY=
Subject key identifier:   89:9A:40:E2:F7:D2:8F:DB:43:3D:10:4D:79:49:61:E6:04:52:47:72
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       47CAA69BCCD809C3851FB6930D9377A7839BE146
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fe6112e-56ff-4eca-954b-97c575f347ed.roa
Signing time:             Tue 18 Nov 2025 21:07:32 +0000
ROA not before:           Tue 18 Nov 2025 21:07:32 +0000
ROA not after:            Mon 16 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        16.58.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ca:a6:9b:cc:d8:09:c3:85:1f:b6:93:0d:93:77:a7:83:9b:e1:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 18 21:07:32 2025 GMT
            Not After : Feb 16 23:59:59 2026 GMT
        Subject: serialNumber=a1bceda6fac214fc7de9bfb7faab1a75b7088dd280e72322428cb16ebc42584c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:93:74:0c:e7:a7:67:17:85:f5:b7:82:0e:
                    c0:89:7b:57:2e:1d:e6:e0:24:db:14:33:de:34:71:
                    83:bc:b3:5e:fe:10:33:21:18:c6:f6:ac:bc:d5:5a:
                    6c:da:40:88:d2:7b:28:36:aa:2e:41:25:df:87:44:
                    2d:8a:c3:d9:27:1f:c2:51:69:e9:bf:42:8a:02:ee:
                    53:d1:24:f5:8e:db:04:a8:64:f6:d4:ca:86:29:c6:
                    95:98:c7:45:bb:5f:1d:4b:74:87:ef:db:bc:ff:5c:
                    c5:61:b8:3a:ad:15:17:ea:3b:c7:e8:48:0a:69:4d:
                    54:f5:91:32:e2:29:ab:c5:cc:25:86:68:15:34:10:
                    ed:37:e5:6a:dc:cf:e3:53:7e:7c:ea:8f:09:01:bc:
                    3c:6e:fd:30:1f:26:fb:32:d8:4a:21:4a:eb:1f:46:
                    eb:97:1f:95:b0:c3:05:1e:1b:2a:29:0a:30:66:03:
                    da:c9:d2:dd:76:28:95:e2:19:8c:b6:77:b4:aa:ce:
                    ef:7c:32:c0:a1:ec:7b:e3:8c:0f:7e:e3:1b:6b:d6:
                    87:35:f5:41:0b:bb:79:7c:86:99:63:8b:93:b0:5b:
                    97:41:d7:d9:b3:96:b0:e9:0c:ed:ce:a5:6c:5a:39:
                    45:9a:83:0f:1c:d3:ec:44:77:d8:4f:75:99:ad:76:
                    70:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9A:40:E2:F7:D2:8F:DB:43:3D:10:4D:79:49:61:E6:04:52:47:72
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fe6112e-56ff-4eca-954b-97c575f347ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.58.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:30:d9:83:69:ad:49:9a:61:2a:c3:a8:7a:06:0a:b0:81:42:
         55:05:89:5c:10:01:05:12:c8:d6:26:b2:cf:08:b3:52:1a:70:
         84:ae:70:eb:74:2d:6d:76:11:3b:ed:da:bc:54:f5:4e:eb:b7:
         9d:c3:72:1e:fa:ed:52:0d:bf:96:b4:12:d3:b9:82:62:5c:40:
         60:8b:9b:0e:0f:8d:80:ba:22:eb:c4:78:a1:cc:4c:ee:d5:04:
         35:fd:62:3a:0f:26:53:e6:13:ad:69:36:46:47:36:cd:ff:f5:
         1e:2a:c6:59:d5:21:72:c5:d4:af:d7:09:1f:0d:14:91:37:ea:
         de:d4:a1:67:f5:4f:f0:8a:f0:df:fc:fa:4f:14:ab:7e:85:1b:
         59:6e:bf:fb:31:f6:83:9f:06:5c:70:d3:a7:37:70:ac:5e:50:
         cd:ce:6c:b6:4d:6c:46:0d:f2:1d:47:da:e6:7f:a9:7a:ac:f6:
         f4:9c:e6:a0:5f:9c:34:5b:ac:58:63:89:21:91:6a:e9:46:19:
         89:80:89:dc:4f:7e:bf:12:de:ef:29:bc:f6:ad:8c:3c:23:c3:
         8a:53:4b:55:61:00:24:b4:b4:d7:6f:39:3f:b2:3b:85:05:fd:
         86:9f:32:a1:fc:7d:46:88:6b:3e:48:5a:25:8b:65:4a:67:44:
         18:f3:65:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----