This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f9208db-91a0-42d9-a1d4-4bcbd5a74072.roa
File:                     1f9208db-91a0-42d9-a1d4-4bcbd5a74072.roa (raw, json)
Hash identifier:          zV5h/ItD5mNIbUzvf33sm4XTVejp1Kx0cEHOG0qSEoA=
Subject key identifier:   91:AD:09:26:73:98:34:27:46:A2:13:C8:5B:06:92:22:E7:3F:87:81
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4412EF87C2E290CAAC2927E37CB1C066B6D18A2E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f9208db-91a0-42d9-a1d4-4bcbd5a74072.roa
Signing time:             Wed 12 Nov 2025 02:11:20 +0000
ROA not before:           Wed 12 Nov 2025 02:11:20 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        56.128.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:12:ef:87:c2:e2:90:ca:ac:29:27:e3:7c:b1:c0:66:b6:d1:8a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 02:11:20 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=e7841666f6260c015493775a1573bae718db99245c926be3152f680b57d18fd2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:76:8f:36:f2:f9:ce:ed:8d:45:7e:b3:f8:
                    63:6b:9d:9c:af:55:98:07:45:18:c9:af:d6:c0:45:
                    9f:5e:95:8c:7b:d4:94:c3:81:18:d6:72:95:ff:19:
                    58:f2:ad:6c:da:ca:20:1b:83:01:e1:0b:9c:76:90:
                    f1:c9:c4:8b:ee:0b:75:95:8c:a7:c5:50:bd:c3:f7:
                    cb:10:28:8d:8f:37:74:2a:b4:30:8f:0c:11:03:37:
                    2e:8a:34:68:57:e9:bd:3f:83:61:98:53:01:76:b1:
                    52:16:b6:ed:cd:8d:82:3b:b5:dd:ee:d5:33:7d:fa:
                    8d:9e:04:4c:ca:04:86:19:62:87:cd:d0:6d:11:53:
                    20:bb:2a:d2:d6:12:dd:42:52:c6:14:10:0c:ec:cf:
                    64:ec:b3:02:21:58:0d:2e:44:2a:53:00:48:54:47:
                    5f:b0:52:95:00:ce:07:c4:45:08:79:38:8a:5a:39:
                    60:2c:bb:59:74:80:42:ca:ab:83:db:d6:1f:6b:5e:
                    83:4b:db:17:be:1e:f9:e7:1b:2f:a3:fc:c4:e2:b7:
                    7d:5b:21:c4:9d:43:ac:00:50:c7:66:91:f0:08:84:
                    61:22:b4:c9:d5:1a:74:25:99:42:54:99:44:64:bc:
                    3b:ef:11:eb:f2:17:7d:61:aa:b7:d5:b2:26:ce:f7:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AD:09:26:73:98:34:27:46:A2:13:C8:5B:06:92:22:E7:3F:87:81
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f9208db-91a0-42d9-a1d4-4bcbd5a74072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.128.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:03:41:33:dc:c2:9c:8e:73:eb:cf:b0:3a:63:ae:9a:71:01:
         1d:2f:4c:3a:b0:32:ff:93:67:00:c8:d2:33:a5:4f:0b:05:0c:
         77:64:41:2c:08:59:5b:ff:16:36:ca:2d:04:43:0d:11:31:85:
         66:9b:55:79:ab:0d:fb:bb:b9:f2:72:d5:d4:63:a6:51:04:1e:
         66:7e:8d:55:86:51:f0:75:50:cf:42:8a:82:bd:39:ea:87:93:
         b6:20:b0:c2:b8:77:0a:7f:bc:d7:49:20:f5:c2:6d:6b:72:43:
         ea:c3:d1:2d:43:b4:42:6a:fd:ab:9f:19:e3:a8:63:6b:36:d2:
         2a:38:0d:aa:a1:04:c1:50:b5:93:c3:62:af:6e:1f:9d:14:83:
         1f:e9:da:68:d6:33:47:ae:43:d8:82:f8:51:f7:35:5b:42:a4:
         72:f5:39:91:9d:f8:05:85:73:71:ca:7b:f5:f2:12:13:91:2f:
         28:7b:be:10:20:66:c7:3c:13:7b:38:a8:ef:6e:75:e5:c5:3f:
         17:5a:34:97:e8:ee:8c:02:ff:37:63:b1:e9:c0:bc:10:c4:a7:
         9b:b7:77:95:5c:3d:51:4f:d0:2c:c2:c5:2e:37:23:a5:da:a1:
         83:87:4b:26:49:ca:35:4a:40:96:89:3e:c0:95:89:51:52:da:
         59:a0:6c:62
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIURBLvh8LikMqsKSfjfLHAZrbRii4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDIxMTIwWhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNzg0MTY2NmY2MjYwYzAxNTQ5Mzc3NWExNTczYmFlNzE4
ZGI5OTI0NWM5MjZiZTMxNTJmNjgwYjU3ZDE4ZmQyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrxXaPNvL5zu2NRX6z+GNrnZyvVZgHRRjJr9bARZ9elYx7
1JTDgRjWcpX/GVjyrWzayiAbgwHhC5x2kPHJxIvuC3WVjKfFUL3D98sQKI2PN3Qq
tDCPDBEDNy6KNGhX6b0/g2GYUwF2sVIWtu3NjYI7td3u1TN9+o2eBEzKBIYZYofN
0G0RUyC7KtLWEt1CUsYUEAzsz2TsswIhWA0uRCpTAEhUR1+wUpUAzgfERQh5OIpa
OWAsu1l0gELKq4Pb1h9rXoNL2xe+HvnnGy+j/MTit31bIcSdQ6wAUMdmkfAIhGEi
tMnVGnQlmUJUmURkvDvvEevyF31hqrfVsibO99IbAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUka0JJnOYNCdGohPIWwaSIuc/h4EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFmOTIwOGRiLTkxYTAtNDJkOS1hMWQ0LTRiY2JkNWE3NDA3Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4gDANBgkqhkiG9w0BAQsFAAOCAQEAYwNBM9zCnI5z68+wOmOumnEBHS9M
OrAy/5NnAMjSM6VPCwUMd2RBLAhZW/8WNsotBEMNETGFZptVeasN+7u58nLV1GOm
UQQeZn6NVYZR8HVQz0KKgr056oeTtiCwwrh3Cn+810kg9cJta3JD6sPRLUO0Qmr9
q58Z46hjazbSKjgNqqEEwVC1k8Nir24fnRSDH+naaNYzR65D2IL4Ufc1W0KkcvU5
kZ34BYVzccp79fISE5EvKHu+ECBmxzwTezio72515cU/F1o0l+jujAL/N2Ox6cC8
EMSnm7d3lVw9UU/QLMLFLjcjpdqhg4dLJknKNUpAlok+wJWJUVLaWaBsYg==
-----END CERTIFICATE-----