This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13aae7f4-cc38-450a-8fe2-e98223497aef.roa
File:                     13aae7f4-cc38-450a-8fe2-e98223497aef.roa (raw, json)
Hash identifier:          PvgqxJJWuA1H6wnQfzGco4n4FdAkYoPqLQPP4gDDKoQ=
Subject key identifier:   3C:27:1D:95:84:CF:DC:FC:2B:E4:65:C3:5B:95:E5:0C:84:0C:25:09
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7173F422B03CA9C4B2BA3440B4A8D0EB77EB302F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13aae7f4-cc38-450a-8fe2-e98223497aef.roa
Signing time:             Sun 16 Nov 2025 00:01:44 +0000
ROA not before:           Sun 16 Nov 2025 00:01:44 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        54.6.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:73:f4:22:b0:3c:a9:c4:b2:ba:34:40:b4:a8:d0:eb:77:eb:30:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 16 00:01:44 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=936ab5982b7b876dab2ec425ad5489694863469e7576aabfd657e142919d01b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:be:71:ca:d8:40:2e:a1:a5:19:eb:0e:bc:e2:
                    7b:6f:30:8b:19:38:04:82:a5:52:d5:63:b2:db:61:
                    74:19:b8:1f:9b:35:3a:44:58:71:16:e7:8b:8a:91:
                    17:88:55:83:52:6e:80:98:cc:b0:34:3b:0c:73:d7:
                    71:db:be:9e:40:40:3a:38:81:08:13:8f:57:25:ed:
                    65:be:28:de:1b:c1:41:fc:cc:bf:4c:f9:84:6b:ac:
                    ad:07:fb:79:38:02:fb:5c:98:f8:f8:eb:a9:65:37:
                    0c:11:c1:98:d4:fe:50:cf:6e:5a:1d:1d:3a:11:5f:
                    3b:5e:b5:4c:b2:6c:c7:ca:94:60:7c:d7:05:1d:dd:
                    8f:c0:57:74:8f:56:71:fc:63:c2:61:2c:01:2d:98:
                    6f:bb:8f:09:1f:4c:a3:9c:83:be:55:c0:27:3e:71:
                    82:5e:47:09:e7:13:97:f4:ba:52:3c:b3:c6:79:0f:
                    3f:79:67:e0:46:77:a5:dd:6f:90:96:b4:07:56:7b:
                    ba:be:95:e4:a1:e2:47:a5:48:69:c5:79:06:39:bd:
                    fc:0f:c2:cb:4a:1c:c5:3c:90:5c:d4:62:c4:88:c4:
                    d4:86:d7:e6:40:7b:22:f9:59:ec:4c:20:d5:4f:1c:
                    a0:f6:a2:49:72:b7:fb:f4:82:59:56:9c:da:95:a6:
                    5f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:27:1D:95:84:CF:DC:FC:2B:E4:65:C3:5B:95:E5:0C:84:0C:25:09
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13aae7f4-cc38-450a-8fe2-e98223497aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9e:97:e7:7d:2c:98:57:9e:64:2c:86:f6:79:eb:f8:23:17:47:
         ca:37:9c:29:f9:f8:26:26:9b:90:6e:cf:24:e0:b8:2c:98:02:
         88:06:05:39:54:aa:42:4d:fe:a7:af:ff:46:d5:11:2f:d8:b0:
         e8:81:ab:82:f0:10:6c:13:c6:6a:36:69:32:7d:20:48:bd:99:
         ed:09:67:8e:2a:e1:1b:c8:2a:7c:d1:09:f0:c9:7b:56:b6:03:
         2f:94:e5:63:83:b8:0d:11:32:2f:de:31:ee:98:48:81:8a:5e:
         65:4c:7f:39:6f:f3:86:90:3a:28:78:eb:2a:6e:64:df:11:ac:
         1d:36:a4:01:ce:fb:91:bc:56:65:7b:f9:b9:c6:08:65:57:71:
         53:3e:a9:d1:66:07:38:58:61:8b:d5:6f:24:2b:3f:b8:28:cc:
         68:b7:d7:4c:1d:c0:f0:c1:fa:6c:93:5d:81:df:9d:bd:bb:9e:
         f2:a8:69:2c:2f:0b:df:db:d8:57:ad:74:13:60:58:4c:f3:dd:
         be:ca:25:d3:8f:ef:a2:3f:1f:96:1e:eb:86:f4:06:c3:3e:4f:
         4a:a7:ed:23:3d:75:92:cd:b5:aa:6b:1b:49:fc:2d:84:bc:75:
         d4:7d:35:3b:89:57:e9:1d:41:cb:0e:02:3b:fe:d4:f1:fa:a1:
         6e:a4:31:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 20 08:41:08 2025 by rpki-client