This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa
File:                     3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa (raw, json)
Hash identifier:          sIVpYjMS6F4Yp/WkY6QMnINk4oGabgd3/gt3JsWiObE=
Subject key identifier:   82:22:8C:02:85:CA:33:0E:99:4C:A9:83:8B:2C:1F:79:D5:D6:45:69
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0AD348881D8FF3F77F1A4AEF20676F68BA77E9A7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa
Signing time:             Tue 11 Nov 2025 02:21:35 +0000
ROA not before:           Tue 11 Nov 2025 02:21:35 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fff:8100::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d3:48:88:1d:8f:f3:f7:7f:1a:4a:ef:20:67:6f:68:ba:77:e9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:21:35 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=f150474b1518217a46c3778edb2a92b61a3d3a6dccb3085336b820850c533e43, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:e9:5b:17:1f:1f:be:95:21:05:ef:49:a9:
                    de:e5:18:ec:cf:ad:7a:c0:72:b5:a3:b7:5e:d9:95:
                    90:01:a1:8a:b2:59:94:dc:4f:6a:da:d1:7e:55:5e:
                    5e:91:ec:8c:01:5c:64:81:70:1a:83:55:5c:f9:d3:
                    3a:cc:a8:7e:65:b2:44:e9:9c:d6:3b:fb:33:ec:d2:
                    fb:58:ce:fb:b6:4d:c2:93:a8:1d:25:8c:17:90:ea:
                    18:ef:15:83:b1:47:c3:5f:1b:26:8e:da:1d:ec:15:
                    95:63:72:06:a6:2f:3c:5b:5b:be:1f:60:f9:27:cb:
                    73:fb:1b:5f:93:7b:83:df:e5:32:7a:83:fc:b4:2a:
                    b8:ac:ed:3f:57:cf:c1:b3:2a:cf:71:9d:75:47:ea:
                    24:c1:5a:73:05:aa:66:fd:c2:30:9d:96:81:dc:3b:
                    46:53:1d:18:01:7c:a3:63:cc:50:3d:07:07:87:fe:
                    fb:e6:39:b2:b8:cc:8f:df:41:76:34:79:99:09:5d:
                    87:5b:ab:0b:b4:6a:fb:47:ad:38:4b:c2:07:c4:d5:
                    02:0f:f0:8f:5a:1c:9d:76:84:a2:b0:66:1b:4b:87:
                    b0:7a:1f:77:46:ec:32:6c:a5:e5:59:d8:de:45:8c:
                    e6:0e:46:6f:7e:40:26:9b:ae:e9:25:1a:a3:ce:4d:
                    47:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:22:8C:02:85:CA:33:0E:99:4C:A9:83:8B:2C:1F:79:D5:D6:45:69
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8100::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:5f:3b:7a:6d:6f:15:5c:69:9b:06:ad:98:d8:5c:db:02:3a:
         d6:9a:9a:97:90:95:7d:03:c4:a8:38:e7:98:83:ae:26:29:4f:
         6b:db:76:d0:ab:ac:27:4f:9f:17:f7:59:d4:39:58:1c:95:a1:
         fa:14:09:28:f7:ca:b0:c0:e8:2e:ab:55:e1:8d:b2:b9:f7:2f:
         08:83:49:14:77:39:15:a4:e8:a5:65:07:c7:3a:10:e2:c2:a6:
         75:a4:af:9a:76:73:15:fe:00:6f:d4:61:ff:c9:e1:0d:c9:77:
         76:8e:5a:59:99:85:22:64:61:27:be:a8:1f:d0:af:ab:3e:8a:
         c8:46:83:9d:d2:e7:6f:e4:8a:ca:b7:ba:9d:d4:8b:fd:07:f1:
         43:75:6e:63:d4:5a:90:fb:e0:73:81:ec:74:9b:77:ac:66:84:
         65:76:04:d9:9e:00:42:48:d0:ce:54:c8:3c:48:81:77:22:2c:
         10:e7:62:d4:cc:d0:06:02:07:01:40:6c:64:65:3a:1c:8c:8c:
         e4:ad:ae:6d:fa:3a:69:82:f4:80:b4:6e:d1:20:12:86:df:ab:
         de:02:77:a4:2b:a9:c0:dd:30:c1:db:0b:83:93:41:e9:bf:bf:
         82:95:a0:a6:a5:03:23:e5:85:dc:72:d0:a7:08:56:37:98:29:
         a6:43:4a:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----