This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ae09067-30bc-4551-a8e9-2ca5d3804caa.roa
File:                     2ae09067-30bc-4551-a8e9-2ca5d3804caa.roa (raw, json)
Hash identifier:          UvSOl7p2dlXANs3amRmQwPEfN3isYGFq8GDKM4fwWig=
Subject key identifier:   79:8F:8C:18:32:96:E4:7B:90:A6:FF:E7:17:7D:E6:4C:1A:A1:D7:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7B70243D2F74D2BD9C42A4C78C438E1051567329
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ae09067-30bc-4551-a8e9-2ca5d3804caa.roa
Signing time:             Wed 12 Nov 2025 01:40:50 +0000
ROA not before:           Wed 12 Nov 2025 01:40:50 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f2b:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:70:24:3d:2f:74:d2:bd:9c:42:a4:c7:8c:43:8e:10:51:56:73:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:40:50 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=96d1f70dbf9979edbab46f30dac56987c7065f9c7a82d76e83689f2b04447a4d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2f:f5:c2:67:8c:54:d0:ac:5d:26:d4:b4:2b:
                    91:84:40:0c:cd:8f:e8:2a:13:79:43:13:ce:54:c1:
                    0d:c9:9e:65:f9:6a:cf:8e:ca:70:bd:25:5e:a8:7d:
                    24:61:76:21:f8:ae:71:ca:1f:b6:ec:7e:68:13:76:
                    3c:d7:65:1c:b2:22:b8:eb:79:a0:3e:1b:62:ac:4e:
                    b3:7a:d9:57:e2:ef:70:73:f4:d2:2c:4f:11:57:59:
                    5a:f9:33:7b:3f:78:ab:53:b5:49:dd:82:fd:d2:e9:
                    41:e7:e9:9b:29:82:cc:93:55:2c:f3:71:1d:00:d0:
                    a5:2d:fa:ff:d2:9a:4b:f7:fe:eb:6a:22:7c:75:0e:
                    be:f4:16:f6:2c:7a:98:89:ce:3e:30:24:3f:5f:94:
                    e9:92:3c:cf:f1:1c:64:3e:c9:a0:82:08:4a:ba:52:
                    41:f4:1d:21:eb:65:0c:a6:c8:ab:97:fc:ee:7d:e3:
                    d0:c2:fb:d2:86:1e:31:71:7b:df:6b:b5:1b:88:3e:
                    a0:f3:58:8d:6c:e1:62:a3:35:19:c1:88:ac:a6:d3:
                    a8:2d:e6:a9:ee:f9:08:62:d8:70:a0:cf:c1:93:98:
                    0d:fe:cb:e6:27:78:0c:5f:5e:a0:64:2e:b6:0f:5d:
                    d2:c4:d5:fd:96:a2:68:0a:cf:bf:b8:0c:4e:85:bc:
                    d8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8F:8C:18:32:96:E4:7B:90:A6:FF:E7:17:7D:E6:4C:1A:A1:D7:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ae09067-30bc-4551-a8e9-2ca5d3804caa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f2b:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         65:a8:2f:27:3a:fd:c1:d0:1d:62:6e:87:1b:ed:e6:09:65:9e:
         6f:36:60:3d:08:23:e2:95:c9:2a:99:90:1c:e7:a1:00:d4:b8:
         24:f7:c7:79:7b:65:67:7c:1f:73:ad:aa:a5:5e:d2:c5:25:1e:
         ce:04:69:e1:77:e4:82:26:f4:65:7f:ba:67:fc:a3:39:b6:f5:
         3c:f1:e5:f3:16:7f:f2:2e:e7:f5:05:b2:ff:c0:a9:b5:3b:c0:
         0c:8d:9e:dc:9f:5c:03:7e:4f:d6:c5:7c:0f:4a:0e:e4:08:fd:
         5d:84:38:4c:26:f0:b5:68:19:45:9a:30:3c:e5:bc:34:87:4a:
         5a:c6:cd:1d:5a:65:5a:a7:3d:df:ac:fd:f4:63:58:1b:4e:34:
         68:24:96:12:d4:d7:a2:9b:e8:67:71:0e:88:3d:1f:7d:bd:76:
         2e:2c:b2:c0:00:b1:2f:a6:c1:c8:66:f4:4c:88:4a:46:43:04:
         62:d9:f0:cc:ea:d4:b2:b8:72:a6:9e:2b:b3:82:3f:c6:31:8c:
         38:9f:44:28:65:c3:52:cd:3d:e0:c9:d5:bf:0b:a6:38:20:20:
         ac:76:ba:c0:df:00:27:8d:99:6c:70:83:63:57:17:1f:c3:5b:
         42:9d:6b:dd:65:ab:94:b2:6d:2b:03:6c:13:a3:ff:a7:ac:19:
         76:87:46:a4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----