This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa
File:                     3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa (raw, json)
Hash identifier:          TA9dZmJwrP+tNGnhWUQTqx8xUjPoEZfCBSdV35ajbvw=
Subject key identifier:   A2:2C:C2:D4:AA:72:AA:1C:85:32:A6:C9:31:8D:7A:95:C5:C0:BE:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6FB9BBF45DBD4327F0B135FCAE6E9AF1957F4783
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa
Signing time:             Thu 13 Nov 2025 00:30:17 +0000
ROA not before:           Thu 13 Nov 2025 00:30:17 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        75.101.128.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b9:bb:f4:5d:bd:43:27:f0:b1:35:fc:ae:6e:9a:f1:95:7f:47:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:30:17 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=0a6e3c61299d841411a1df4fa9f0e9ee957ddd008787682c55a733d8b1741062, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:6d:b7:41:78:cb:51:be:6c:b5:3c:5a:b5:
                    3a:5f:35:6a:f0:f2:4b:cc:3c:c5:7b:c4:9b:bb:78:
                    41:ac:d8:76:9c:52:2c:5c:24:3d:53:a4:2d:ce:c9:
                    16:00:3c:b9:cc:e2:a9:f3:fc:be:96:aa:8e:aa:dd:
                    b2:f0:d2:69:35:da:c8:c0:3d:42:7e:7a:9e:74:4f:
                    26:1a:4a:3d:69:0e:d4:74:69:a2:89:fe:29:f6:ca:
                    ef:b7:be:bc:a0:b6:99:04:77:83:03:5f:4c:72:59:
                    28:90:84:fb:ae:60:f9:d1:01:4a:18:69:68:0f:ee:
                    f0:9f:ed:04:1c:04:9c:c1:1b:ef:b4:ae:9a:01:ee:
                    05:45:d8:42:19:64:0f:cd:7c:b2:f1:2b:91:dd:9f:
                    d5:39:b3:bb:5f:05:c4:47:94:cc:02:01:19:b2:12:
                    82:4d:49:94:da:08:fe:8a:d9:80:49:1b:e5:ea:ae:
                    38:6a:ba:5a:22:88:4c:f2:34:4e:30:88:39:6e:0d:
                    81:b8:3f:62:99:75:56:2d:b2:fc:f9:b5:d3:92:53:
                    da:e2:f2:ef:a2:6a:31:31:6d:47:4d:69:cd:3f:17:
                    a8:0c:c2:2d:11:8e:f0:8a:17:96:5b:66:8f:a1:68:
                    b2:ee:64:a7:06:12:7b:84:e8:1a:65:1d:12:ec:ff:
                    f0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2C:C2:D4:AA:72:AA:1C:85:32:A6:C9:31:8D:7A:95:C5:C0:BE:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3642f1fa-fa6b-4cfe-b125-733951f3ebaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:94:b1:24:a7:4c:35:82:8d:a3:b0:16:d2:26:12:d6:4f:07:
         77:e9:64:ff:52:92:98:82:c4:fa:fe:c7:c7:77:c4:af:99:da:
         d9:63:77:ea:bc:94:76:5a:0f:8e:a1:a0:b3:78:b6:8d:52:2e:
         e0:16:ec:8f:d1:94:f0:2d:ff:3b:74:09:a8:0e:28:47:13:55:
         c0:5c:c6:28:81:14:fc:42:f8:d1:07:3a:94:bd:22:70:bb:a6:
         d2:09:95:21:4b:87:4e:77:60:9b:29:00:0a:e2:bf:0c:4f:15:
         cf:55:ea:cb:10:75:f6:9f:8a:40:e3:47:60:cf:ef:85:df:4c:
         06:5d:cb:27:e7:a0:45:97:55:b3:1e:3f:ce:81:e6:98:04:e7:
         ab:d6:84:92:72:70:01:2d:d5:e2:ff:6a:7c:2b:17:bd:da:3a:
         d3:f1:0d:a7:e3:46:33:7d:c7:55:61:a7:b4:e8:6b:7e:b9:9b:
         a7:3b:ae:e5:4c:27:4d:c1:69:1e:64:bf:6b:da:3c:b3:1a:9d:
         17:65:2d:fe:e8:44:7c:f9:46:06:93:a4:cd:d6:e7:c0:e6:58:
         c5:f5:b9:71:18:49:b4:9c:93:a4:6f:5e:c9:d1:6a:9b:58:2f:
         53:af:d8:97:c5:7f:f4:d1:75:7c:3d:b5:4a:d3:5e:96:3d:5f:
         b8:0b:75:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----