This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a416471-7293-44b5-9ae4-b83a744da832.roa
File:                     8a416471-7293-44b5-9ae4-b83a744da832.roa (raw, json)
Hash identifier:          D50ThmjzsteFSz7s68VFhFXOL954/UtfEZnuAh9hqYo=
Subject key identifier:   1E:37:16:92:B8:D6:46:23:EE:65:82:C0:0F:33:98:5C:93:6A:CA:5C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17D14498655BB6A4F18E9B75141EAD373E51559F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a416471-7293-44b5-9ae4-b83a744da832.roa
Signing time:             Fri 21 Nov 2025 16:36:42 +0000
ROA not before:           Fri 21 Nov 2025 16:36:42 +0000
ROA not after:            Thu 19 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.42.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d1:44:98:65:5b:b6:a4:f1:8e:9b:75:14:1e:ad:37:3e:51:55:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 21 16:36:42 2025 GMT
            Not After : Feb 19 23:59:59 2026 GMT
        Subject: serialNumber=099e30b980e8fab7f7b894a7379dcb85a195d46f758b09ae4e759435f5d9dbc7, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ea:ab:b8:88:11:f1:8e:27:10:0f:ed:18:0c:
                    c4:fb:e9:20:62:19:89:5b:3f:56:01:95:fd:7c:5c:
                    ba:b7:88:af:4c:97:b9:6a:90:b7:49:7f:6a:0a:58:
                    96:d8:f7:a6:9e:41:1f:ec:84:03:c7:21:8e:fb:53:
                    f3:fb:fc:1d:a3:8b:92:d3:7c:3d:90:f8:63:1a:c8:
                    23:1d:0e:89:90:c5:7b:e1:4e:8a:f6:2e:5b:32:68:
                    90:d0:49:af:fb:a5:0b:05:ab:3a:f6:7c:bd:a5:cc:
                    a6:f1:8a:da:70:06:16:5c:19:96:83:3f:59:42:df:
                    3d:34:99:62:36:0a:65:6f:4a:a3:1b:8f:7d:51:fa:
                    13:87:cd:96:d2:2a:39:2d:5d:7f:c9:2e:eb:13:c4:
                    81:b7:6b:49:4b:02:59:38:0f:0e:be:2e:9a:a1:65:
                    f3:9e:e3:b9:2d:af:d9:9f:49:6b:61:65:c8:c1:10:
                    41:d8:f1:f4:62:c3:6c:11:ab:70:2d:70:36:77:2b:
                    7a:fb:34:07:1b:68:ff:c3:de:6e:c7:3b:73:63:6e:
                    5e:a8:ca:e0:93:2b:69:ae:83:17:74:31:41:23:f0:
                    37:0a:69:00:18:41:40:e5:31:07:8c:87:a7:45:9c:
                    d3:2b:54:29:e9:8d:1c:3c:28:0a:aa:f7:d3:d6:18:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:37:16:92:B8:D6:46:23:EE:65:82:C0:0F:33:98:5C:93:6A:CA:5C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a416471-7293-44b5-9ae4-b83a744da832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.42.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:e3:62:e6:ec:14:cd:43:e1:c3:ab:73:f1:15:ec:b9:5e:e0:
         f3:3c:11:b6:d5:ea:29:9b:fd:45:73:7a:2c:29:21:9f:67:bc:
         9b:8d:fc:c7:56:2f:9f:4b:fb:db:27:60:95:66:e1:b7:b1:38:
         2f:1d:c3:d0:21:37:63:e8:34:02:e5:28:8d:92:17:6e:d8:20:
         5b:86:1a:b6:7c:80:eb:85:e6:c0:43:72:9b:97:49:78:f4:7d:
         1a:e5:b8:75:37:da:7c:7e:ab:7c:f1:53:ea:61:16:f5:3b:30:
         6c:2f:9d:56:a7:aa:8b:a3:e8:82:93:61:2d:c8:96:ca:82:33:
         8f:a6:35:d2:87:2d:49:50:18:41:80:8d:33:d0:8d:db:5b:1d:
         6d:82:a0:7d:b1:16:87:85:ed:40:63:2f:bd:52:d8:61:e6:d0:
         d8:de:0d:e6:cd:7b:e6:4f:a8:bd:14:c6:d2:f5:fb:bb:2c:2a:
         39:2d:07:f5:04:6e:6e:e1:87:00:79:8e:01:fb:05:bf:58:ed:
         c2:5a:de:ac:16:43:c5:0a:cf:1a:c7:fb:9b:7b:00:bb:23:59:
         84:60:61:95:a9:6d:f1:b3:83:b7:82:d4:b2:eb:a3:da:5a:93:
         f4:a7:34:c4:5f:d6:a5:89:b8:2c:61:78:25:05:11:5a:76:f6:
         8b:49:46:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----