This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1347a92f-2ada-4350-b885-c21a89d01e42.roa
File:                     1347a92f-2ada-4350-b885-c21a89d01e42.roa (raw, json)
Hash identifier:          iS6d+uMNcopzRpspg3kHPJ0PgidGauyJB/wSrwSXOIM=
Subject key identifier:   4D:E9:0F:73:C5:44:10:53:70:3C:D2:12:54:79:0A:1B:75:F6:9C:77
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       280E626C686F41106C90D4BDA13A3655FF9D7555
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1347a92f-2ada-4350-b885-c21a89d01e42.roa
Signing time:             Wed 12 Nov 2025 01:10:58 +0000
ROA not before:           Wed 12 Nov 2025 01:10:58 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.198.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0e:62:6c:68:6f:41:10:6c:90:d4:bd:a1:3a:36:55:ff:9d:75:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:10:58 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=b833c10b4c95add5ae950fcf32e7244dfd9ccb1ab6d74b3e8c5f747d367cdeba, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:ea:bb:24:d7:fe:12:a2:d9:66:79:be:bf:
                    46:9e:4f:2e:7d:c2:5c:5a:ad:8c:1e:65:7d:7e:5d:
                    aa:f9:46:ef:e1:f5:07:18:18:ea:17:30:e4:d6:27:
                    31:89:ad:f8:de:3c:fd:e2:56:39:72:dd:5c:d0:64:
                    05:e1:e7:07:4d:36:70:43:1a:35:d6:64:5e:99:1d:
                    34:51:24:12:43:a4:66:9b:95:ee:8b:88:ff:8a:f0:
                    d1:57:dc:c4:2a:a8:3b:cc:e6:c9:fd:5a:5e:b0:cd:
                    a3:77:f3:d5:ae:c6:65:2c:67:95:1e:01:73:dd:88:
                    9c:c2:e7:3c:56:44:86:31:31:28:62:8e:54:fe:3f:
                    99:e5:90:3b:df:a3:39:3d:21:bd:77:83:58:a0:c9:
                    e3:b9:ce:0f:d6:c9:cb:5e:55:51:3d:e3:29:96:ab:
                    59:ec:fa:7b:d0:a8:40:77:e0:a1:af:15:2a:52:24:
                    e8:1f:e8:5d:e0:ba:fd:75:38:5f:07:6e:c3:0e:1f:
                    e4:2a:6b:4a:ff:51:6c:26:7c:31:00:51:6f:bc:2b:
                    00:d5:f4:8a:12:7f:03:3f:c2:48:7d:a1:56:7c:a8:
                    30:7c:95:33:ff:ef:3b:34:42:4c:7d:96:68:43:95:
                    81:82:f0:b4:a5:f4:a1:77:73:e0:aa:5b:d8:d0:3b:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E9:0F:73:C5:44:10:53:70:3C:D2:12:54:79:0A:1B:75:F6:9C:77
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1347a92f-2ada-4350-b885-c21a89d01e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.198.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:3f:e7:cc:1b:3f:65:38:b2:d3:31:59:51:ab:90:ec:ba:e8:
         79:8a:65:6c:2d:b8:8e:4f:2c:dd:06:07:3b:10:24:6e:61:33:
         ca:ea:d6:f2:25:13:30:d6:90:b0:f9:35:92:af:15:97:6e:0c:
         d1:85:1b:c7:b0:18:cf:99:d4:d9:45:32:9f:cd:e2:ca:18:ce:
         f3:c2:15:5f:0c:6c:21:87:a9:b8:34:fd:50:7b:31:59:01:ff:
         fe:f0:92:93:db:78:6c:c6:a3:21:fb:1c:59:d0:d3:08:c4:7b:
         11:d2:0a:14:86:50:62:0a:74:0d:3c:29:45:2a:14:29:81:fc:
         8c:22:f6:96:e7:6a:df:e7:06:d9:33:2d:1f:0e:94:8c:f8:22:
         1d:0b:23:98:cb:4d:9f:e0:50:17:44:4f:f5:df:cc:00:96:8e:
         0f:49:5c:cf:5d:07:ca:23:fd:21:cc:aa:19:46:40:2b:83:7a:
         4c:98:f0:e1:26:0d:2a:88:65:2c:3b:e8:66:20:d5:4d:5b:a8:
         e0:be:f5:b6:93:5d:cb:3a:bd:02:b5:68:f5:b5:74:bc:86:be:
         38:af:c7:ea:03:14:13:7c:eb:a0:f9:55:0f:a7:b3:d6:b8:04:
         21:8f:4f:ab:b3:e5:44:95:04:d2:62:d8:f8:a2:44:0b:a3:80:
         9c:0f:22:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----