This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f920d51-a0be-45d0-8a7c-d2e3806aebbd.roa
File:                     6f920d51-a0be-45d0-8a7c-d2e3806aebbd.roa (raw, json)
Hash identifier:          9Ll29JD+eYxIb00hw9ISZBrrUnarYJgZcNhSWt272hE=
Subject key identifier:   DC:E3:C7:02:E3:33:E1:0B:E3:5A:4A:B5:1B:5D:BC:6F:7C:A8:BF:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       52BD4C3DA6C119CFBCECF5FB4C86CE033476B849
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f920d51-a0be-45d0-8a7c-d2e3806aebbd.roa
Signing time:             Sat 08 Nov 2025 01:10:50 +0000
ROA not before:           Sat 08 Nov 2025 01:10:50 +0000
ROA not after:            Sat 13 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f00:2c00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:bd:4c:3d:a6:c1:19:cf:bc:ec:f5:fb:4c:86:ce:03:34:76:b8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov  8 01:10:50 2025 GMT
            Not After : Dec 13 23:59:59 2025 GMT
        Subject: serialNumber=e7d7bf4bff5ea0cb5e92d66b270aa6431259d3da0f6a987b0f0c9776642b4a98, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:86:2b:5d:5c:5b:46:1e:38:be:9c:26:06:25:
                    cd:15:38:69:3c:4f:67:84:d2:c9:e9:e5:f0:9e:b6:
                    54:e2:34:d5:67:7c:d7:da:87:1d:22:2b:4b:64:48:
                    d5:0e:c6:04:52:e0:4d:ee:e0:67:11:7b:11:d8:0c:
                    f5:de:4a:12:b0:c4:cf:45:a0:de:a9:a5:32:b6:5e:
                    59:38:d1:dc:cf:f8:09:5c:45:18:5b:63:32:f6:a4:
                    31:a7:38:9f:76:13:22:5a:4f:c8:a9:26:8d:f6:dd:
                    09:52:01:5c:4b:45:f7:5e:a4:35:d1:36:c5:7e:c0:
                    4a:d8:27:da:54:f8:93:18:44:e8:7d:33:32:34:9a:
                    31:4b:ac:27:28:14:6f:3e:86:40:68:44:8e:e2:e4:
                    47:c8:a9:48:78:56:8a:54:7f:3f:20:e1:e3:86:1f:
                    83:31:d4:d5:72:bc:eb:a6:44:9e:b1:df:b1:05:b9:
                    a8:6f:fb:ad:37:b6:43:c1:b1:ac:47:38:36:5a:9a:
                    a4:f8:0b:7c:f9:0c:46:a9:bc:a8:dd:5e:25:87:4a:
                    f1:7a:e2:6a:5f:f7:37:5b:ef:c9:b4:33:65:91:60:
                    e5:9c:62:79:92:d4:b7:ea:20:87:02:e6:81:43:70:
                    57:db:4f:8a:39:20:c2:42:d0:35:fd:68:b0:2f:7f:
                    7d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E3:C7:02:E3:33:E1:0B:E3:5A:4A:B5:1B:5D:BC:6F:7C:A8:BF:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f920d51-a0be-45d0-8a7c-d2e3806aebbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f00:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:4e:e7:86:de:80:9d:15:85:20:3a:4f:56:5f:48:b1:3a:32:
         8d:9a:1e:d2:61:26:d3:83:16:e2:f9:bd:27:31:a9:fa:40:ad:
         ee:2d:76:2f:c5:33:e3:7a:c1:70:b6:b5:72:2b:8d:c4:a2:0a:
         4b:3e:3d:c9:a9:e2:39:15:af:57:0f:2c:28:3a:98:5a:39:4e:
         2f:95:7e:f1:ba:b5:62:dd:90:60:b4:18:e9:a1:c5:04:78:e9:
         1b:ec:84:7e:5f:11:61:e6:ab:c2:7f:30:24:b6:c2:b4:69:c9:
         82:0b:f5:b4:e2:10:83:1f:76:18:d9:af:58:6c:c1:ca:9c:48:
         8b:1b:40:be:cd:64:d8:3a:c4:c6:72:ed:bd:8d:0f:32:f4:a6:
         74:01:99:a6:7d:ef:da:bf:36:6f:0a:5c:34:86:09:88:fc:bb:
         bd:be:dd:68:c8:dd:cf:28:76:56:06:72:41:3c:6f:6a:34:eb:
         12:fd:54:5b:1d:68:dc:6d:a2:40:43:3f:22:4e:ac:74:9b:c3:
         df:85:87:2d:8f:09:cc:ef:74:a7:4f:2f:6d:53:56:05:a5:aa:
         0a:61:b7:8f:25:83:04:d2:85:16:5a:eb:f7:d3:60:d8:6f:1c:
         a5:ba:09:e6:5a:96:7a:c9:81:50:7d:28:e9:06:16:80:16:1c:
         80:37:d1:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----