This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a975cd8-96d0-40e0-b0ac-ae7d8cda8ba4.roa
File:                     1a975cd8-96d0-40e0-b0ac-ae7d8cda8ba4.roa (raw, json)
Hash identifier:          3SrYuvb+dOLhiYd4Vr+SpF8LaaM6WpN2OjNru/FxpLg=
Subject key identifier:   74:0E:58:56:07:A1:5F:C6:F8:2E:8A:31:28:7A:45:6F:BA:EB:DF:64
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2287262B7431B409AF47B11AA470D82996F56BB5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a975cd8-96d0-40e0-b0ac-ae7d8cda8ba4.roa
Signing time:             Wed 12 Nov 2025 01:30:15 +0000
ROA not before:           Wed 12 Nov 2025 01:30:15 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f2f:8000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:87:26:2b:74:31:b4:09:af:47:b1:1a:a4:70:d8:29:96:f5:6b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:30:15 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=0b5575f33decea40446de0b2c1047a8ee9a627b176353cb269acedc76fb552fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:1f:e8:68:9a:6e:5f:ba:7e:30:0b:e6:9f:
                    52:15:4f:5e:7b:8b:58:fd:3b:f6:9f:42:32:6e:aa:
                    76:03:54:72:6c:1a:a9:26:40:2b:a7:44:59:8a:4e:
                    98:5a:82:39:3f:ff:f2:a4:c2:58:96:8c:51:44:08:
                    4d:01:22:cb:46:e8:b0:bd:cd:7d:44:d0:58:3e:59:
                    ea:1c:1e:b9:47:79:e4:03:f3:39:5f:04:d5:1e:3c:
                    e2:08:97:7f:1e:7a:5f:e0:3d:34:e7:d3:6c:ad:f1:
                    4c:c2:21:46:32:69:0c:57:4e:e9:be:13:ca:b2:6c:
                    7a:34:97:5d:5d:26:9d:24:c3:9b:12:b9:6d:cf:c2:
                    c9:b9:d1:f7:57:78:26:91:bd:54:8c:40:13:65:58:
                    62:58:ac:15:d3:ea:6e:15:76:a5:b8:5e:a3:eb:fd:
                    8b:78:a7:f5:46:f4:c8:4f:ec:6e:7f:c1:70:08:81:
                    42:c8:22:7f:99:f8:c0:9f:aa:94:3d:e9:58:50:95:
                    90:fa:66:e0:7c:ad:9c:5d:10:92:53:a6:67:53:64:
                    54:32:eb:a1:fb:15:49:9f:58:c1:80:23:7e:e3:2a:
                    3f:83:e9:dc:b1:31:53:69:3d:65:71:89:fc:f2:42:
                    d1:c0:ec:9e:d0:a1:7e:e4:a9:ef:48:42:f6:22:45:
                    d4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0E:58:56:07:A1:5F:C6:F8:2E:8A:31:28:7A:45:6F:BA:EB:DF:64
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a975cd8-96d0-40e0-b0ac-ae7d8cda8ba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2f:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:59:74:91:7e:71:3d:31:08:31:c1:96:13:80:97:79:bf:34:
         ca:d3:0d:82:c4:29:39:ed:6d:49:3b:eb:4e:28:60:3e:6c:ec:
         59:35:f2:a9:6a:43:a5:25:60:d9:13:14:6d:9a:51:45:84:40:
         14:8d:e5:2d:33:26:ff:01:b0:15:02:22:2f:fa:2b:65:6f:41:
         ff:54:05:9d:58:ec:3f:53:70:ff:03:5e:f6:fd:f1:88:f0:4f:
         d7:0a:ec:2c:3b:df:50:7d:18:96:ca:1b:3e:0c:88:8c:ea:d1:
         95:86:a6:ab:89:26:d8:14:4e:d1:e9:8f:fa:9a:26:68:6d:5d:
         e6:ce:17:6f:32:ea:97:f1:55:5d:8f:47:59:25:42:bd:a9:07:
         94:a0:df:61:36:71:3e:79:d2:20:91:e7:95:40:9b:90:7b:29:
         b6:d2:fe:89:43:13:7f:ab:2c:23:eb:97:8b:bc:de:34:b5:8d:
         4d:66:9f:3f:87:ba:a9:dd:dd:10:c2:32:75:00:d6:f6:a3:a0:
         85:a6:74:23:c7:45:e2:54:71:7b:6d:95:8e:f0:f4:5e:d9:50:
         d0:47:4f:90:ae:23:7e:e5:10:f5:59:dd:79:66:ce:09:97:c8:
         fe:94:15:8a:6c:f5:34:c9:9b:c8:a5:07:82:06:8e:80:ec:68:
         2c:4e:17:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----