This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2755257d-c981-4d5f-b9da-b6d3b66c1cb7.roa
File:                     2755257d-c981-4d5f-b9da-b6d3b66c1cb7.roa (raw, json)
Hash identifier:          OBgLg8L4OZqqd8xBdzK9P6GlU1P/fgb5f1GXwLAO+J8=
Subject key identifier:   F1:39:C6:F9:52:E1:42:19:06:19:1A:D7:EF:CC:2B:7A:1F:53:94:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       082783179E04D1910AC934EB59C21AF81A1AFA8E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2755257d-c981-4d5f-b9da-b6d3b66c1cb7.roa
Signing time:             Wed 19 Nov 2025 00:01:09 +0000
ROA not before:           Wed 19 Nov 2025 00:01:09 +0000
ROA not after:            Tue 17 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.54.32.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:27:83:17:9e:04:d1:91:0a:c9:34:eb:59:c2:1a:f8:1a:1a:fa:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 00:01:09 2025 GMT
            Not After : Feb 17 23:59:59 2026 GMT
        Subject: serialNumber=7c58e6eb7ab90b8a505d17d756a7f907523406bce24db3a5e95cb6d978cc6cbe, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:3b:78:1d:85:de:d0:e3:9f:6d:7c:5d:67:
                    82:2e:5a:ee:61:ee:94:5f:b0:f2:7d:4b:ee:d4:38:
                    22:ba:93:40:b8:03:35:66:86:08:49:35:f5:c9:63:
                    35:95:ac:fc:49:78:2e:26:0d:eb:5e:c1:07:ba:bf:
                    43:6f:62:33:85:01:26:ed:24:ff:26:89:bd:3a:59:
                    60:0f:7d:50:56:5c:25:20:2b:88:4d:23:f1:c7:69:
                    93:c9:c1:30:6a:ce:4e:ce:5f:25:32:fc:be:2d:59:
                    ce:11:4c:ce:cd:63:ca:09:f3:38:5f:7c:7d:f0:c9:
                    8a:18:26:3a:20:13:8e:3d:4c:51:eb:a5:a7:e0:77:
                    15:51:de:8e:3f:8b:64:b3:e0:4d:0d:b5:e4:c8:67:
                    ce:ee:e6:ef:c2:26:2b:44:b7:73:5a:2a:42:e4:ea:
                    a1:75:85:2a:d2:52:a2:f3:48:2e:91:05:ab:d5:2e:
                    37:5f:0a:7e:e4:d4:de:50:83:e3:ee:bb:12:6f:1f:
                    d4:7e:17:77:07:16:7a:4d:30:4b:7b:74:a4:89:94:
                    13:48:76:56:e9:32:27:2f:43:8f:70:f5:91:d9:0f:
                    68:49:33:24:63:a8:3b:f6:23:87:e8:26:42:e5:47:
                    46:c5:ee:ef:a3:4e:86:60:ea:d7:d8:fc:31:53:3e:
                    86:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:39:C6:F9:52:E1:42:19:06:19:1A:D7:EF:CC:2B:7A:1F:53:94:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2755257d-c981-4d5f-b9da-b6d3b66c1cb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:d0:31:3c:b4:d1:85:95:a3:84:4f:e9:dd:eb:22:4c:ba:a7:
         b7:1f:13:4b:ac:76:d8:02:e2:61:fa:36:35:96:4d:dc:54:e3:
         b1:c1:09:a1:16:18:94:f5:66:9f:24:11:15:d7:0f:71:54:a8:
         55:f5:4e:6a:fb:3b:63:d7:ed:e0:03:b8:4d:d3:c9:45:80:d8:
         b2:53:da:8a:58:f4:33:d4:b0:79:4f:52:81:a6:f1:77:17:52:
         3a:de:ed:54:e6:89:db:cf:af:a2:83:fb:15:f8:0b:3a:26:1c:
         aa:be:8a:fc:47:71:dc:8a:10:f3:87:e1:de:63:5f:96:1b:fa:
         2a:2d:de:f9:a6:72:f6:f9:e6:d1:e6:38:fc:a1:d6:a4:f1:79:
         93:73:5e:e9:59:56:76:a9:fb:87:17:ba:ac:d3:8f:ed:33:48:
         15:ba:8d:61:6a:52:6e:c7:7d:59:f2:f6:25:be:bf:60:9b:81:
         b6:fb:dd:5b:3a:72:0c:82:b4:a2:c1:b7:d7:51:20:f1:fa:e3:
         ad:b3:57:19:24:4c:93:50:64:25:13:6d:54:49:0c:5c:7f:e9:
         70:56:59:eb:fc:b9:b7:46:cc:7b:a9:f9:78:a5:5d:b0:0b:8e:
         15:97:e5:5c:f0:32:9c:f1:8e:3a:d1:71:bb:2d:e8:41:62:96:
         ad:89:12:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----