This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40d34c5a-5089-4544-85d2-37c75af53934.roa
File:                     40d34c5a-5089-4544-85d2-37c75af53934.roa (raw, json)
Hash identifier:          OL3l60HqmJdMtdW3BMNocWyHNSh3RiLFnDxoFILKSTE=
Subject key identifier:   B4:72:B4:F8:6A:0C:2D:12:5B:4F:CE:D2:36:B1:F6:D2:E2:9D:54:88
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       025CE6D7D46EEE1359DFD04EDA2FDBE4D00FD5CB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40d34c5a-5089-4544-85d2-37c75af53934.roa
Signing time:             Wed 12 Nov 2025 01:30:46 +0000
ROA not before:           Wed 12 Nov 2025 01:30:46 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f10:c000::/37 maxlen: 37
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5c:e6:d7:d4:6e:ee:13:59:df:d0:4e:da:2f:db:e4:d0:0f:d5:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:30:46 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=070f3340cfe71605bd49e1c180a3b08b8961756b7519a17fe85bb490ab2a0ce1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:3a:b6:1a:a5:5d:25:14:5e:fb:91:95:c7:
                    f7:ae:b4:d1:58:50:28:21:f0:8a:91:8e:8d:f1:31:
                    a8:b6:e5:a3:09:55:2c:c9:6e:ea:07:8c:e0:cc:cc:
                    b0:ae:64:84:d3:e0:59:08:25:07:5b:c0:8f:19:18:
                    53:65:f9:8b:41:1c:52:20:5d:d0:1f:25:f4:f9:f6:
                    ed:8c:51:83:3f:e8:8e:47:1e:d7:15:2a:2b:b0:2c:
                    66:bf:7e:6c:ee:9b:79:37:b4:6e:02:6a:5b:bb:ab:
                    4d:42:d0:44:86:fa:21:00:be:f7:b8:2d:84:6a:27:
                    fd:7b:75:6c:ba:23:94:63:1b:25:bf:f3:bd:69:84:
                    89:a3:eb:e5:a9:68:b7:ef:79:fb:99:9d:56:4f:2a:
                    03:c3:ba:0e:80:27:37:6e:05:d4:8c:16:ba:d3:23:
                    5c:ab:6a:69:96:fb:1b:1d:ad:70:06:42:7b:57:36:
                    63:d2:fe:28:fd:77:95:d8:59:9e:40:41:13:dc:0d:
                    d2:e3:2e:7b:19:57:78:34:13:f8:64:fa:2b:64:c3:
                    1e:cb:59:42:fb:8f:c9:94:53:6c:0c:e2:1e:4d:f7:
                    23:d1:8b:44:6e:42:6e:91:7b:6a:c8:5e:33:7a:52:
                    86:29:c9:7a:7d:4d:c3:0f:94:a6:bc:3c:a1:67:5c:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:72:B4:F8:6A:0C:2D:12:5B:4F:CE:D2:36:B1:F6:D2:E2:9D:54:88
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40d34c5a-5089-4544-85d2-37c75af53934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f10:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         70:25:90:b7:35:be:d3:a3:b5:f0:0d:1b:0f:e9:5d:60:88:7a:
         06:62:5a:3e:8e:cc:7a:d0:fb:17:89:76:25:90:c4:15:47:12:
         5c:d5:06:1e:b3:6a:99:91:bc:dd:b3:6c:2a:7d:6f:29:8a:18:
         1a:80:b4:99:fc:18:28:7c:0f:d8:63:45:2c:96:4d:68:2a:05:
         4c:56:3c:50:5d:f6:25:2b:4b:68:62:cb:8a:5e:b4:92:9b:37:
         f6:10:5e:00:a4:ff:6e:3e:cd:77:38:a9:be:1c:5f:76:9b:99:
         92:39:03:ec:99:37:bc:ff:92:cb:f4:4f:00:e4:60:6c:85:46:
         d2:fd:66:ce:dc:40:ab:10:65:2d:21:2c:4d:43:86:18:3c:54:
         99:75:4e:01:83:77:0d:90:19:b8:76:eb:96:8c:6e:0a:d4:85:
         a6:e2:79:55:26:78:83:c7:2b:a9:a6:39:ad:0c:7f:5f:38:ee:
         04:32:c0:21:a0:8d:95:89:2c:f6:b4:35:f2:e1:0c:88:5e:ef:
         0c:e0:3c:31:ca:55:8c:8c:3a:6e:61:b6:0f:80:47:88:68:09:
         37:da:5e:63:89:8a:8a:25:b5:6d:46:88:17:63:2a:fb:66:08:
         d9:d2:1f:2b:75:a6:11:e0:0a:08:b5:3b:f3:8b:2e:50:c4:47:
         6d:e8:0f:b5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----