This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d552d63-bbe6-4c64-9bf6-4790de201429.roa
File:                     8d552d63-bbe6-4c64-9bf6-4790de201429.roa (raw, json)
Hash identifier:          3g2BNWLY2bcMi1UfZnt4O5ZqPuEe+hCKIH3gCk/kbnI=
Subject key identifier:   EC:BA:5A:33:8E:1A:2A:11:5E:8F:93:C3:60:1F:C3:70:60:5E:08:6A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7F07750FB9AF1A84109D2B0B8837549AA1253E24
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d552d63-bbe6-4c64-9bf6-4790de201429.roa
Signing time:             Thu 20 Nov 2025 00:20:10 +0000
ROA not before:           Thu 20 Nov 2025 00:20:10 +0000
ROA not after:            Wed 18 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        56.51.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:07:75:0f:b9:af:1a:84:10:9d:2b:0b:88:37:54:9a:a1:25:3e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 20 00:20:10 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: serialNumber=642f82131586e289ae33d7bbe6713c5d65e74b010e554a127e33e118714b7de5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:72:e1:eb:b2:ba:6e:df:c7:e1:a4:d8:a5:
                    a9:d3:94:a1:1e:3e:55:7a:09:7d:90:03:a8:4b:2a:
                    92:9d:a9:8e:86:10:8f:19:63:d7:21:5c:ee:2e:05:
                    ec:13:37:60:ed:ec:31:d7:df:97:cd:24:57:7c:3f:
                    5d:70:b7:59:26:0d:e1:1d:bf:1c:a4:c1:2d:8e:ab:
                    32:d0:23:e9:8d:7b:f1:0f:c0:5c:a0:f6:f1:32:cb:
                    db:e3:21:5e:85:26:9b:a2:6a:ee:96:3f:57:2c:85:
                    23:72:85:6a:4c:ef:49:3a:c0:ef:4a:33:f4:4b:52:
                    05:8c:4d:1b:8a:91:c4:f0:80:ae:22:97:0d:d8:b2:
                    19:85:92:dd:71:8f:57:9d:98:35:a7:40:99:b9:15:
                    12:d1:28:09:98:5e:75:a8:69:3c:4d:83:4e:66:f0:
                    2a:39:bc:8f:73:c5:8c:9d:28:66:c9:c3:b5:a5:94:
                    2a:8c:75:03:0f:5d:e8:84:25:f1:28:57:3f:d0:c3:
                    27:cd:db:b5:99:a5:d9:60:f1:e1:b0:7b:10:2f:e0:
                    18:69:65:79:4f:f9:11:27:44:8e:1f:6d:22:c5:66:
                    67:c6:6e:ef:a1:9c:0c:1c:44:29:2c:10:53:07:43:
                    b9:df:8f:be:9c:61:2d:ac:ba:94:db:0d:99:9d:71:
                    ad:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BA:5A:33:8E:1A:2A:11:5E:8F:93:C3:60:1F:C3:70:60:5E:08:6A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d552d63-bbe6-4c64-9bf6-4790de201429.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.51.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ab:2b:a4:5d:23:63:31:58:91:b7:6c:7d:12:b0:c7:03:f7:91:
         69:4f:af:8f:f8:b9:1d:4d:e0:5b:e4:d3:6a:c8:21:ed:47:13:
         b9:9c:8f:af:bb:b2:f5:47:de:21:be:56:fd:d1:37:ec:1f:8d:
         05:4c:e5:3d:6d:ba:01:9d:7b:46:16:3a:28:ae:c5:9a:d6:13:
         a3:45:b6:f2:2d:c0:67:30:57:df:ee:30:e2:10:cb:9e:c7:3b:
         81:a5:b9:d8:4e:22:1d:52:94:c5:a9:2c:de:03:8e:4b:06:a8:
         e7:5d:f0:9f:8b:80:8a:6d:67:79:d0:e5:b2:f2:3c:55:a5:00:
         c5:86:d7:be:9f:49:b8:4d:f3:b3:28:88:2e:75:7e:7b:f0:fa:
         e6:cb:de:7e:60:6e:33:09:4b:0a:d1:a0:01:a2:74:38:f4:f4:
         6b:cc:85:08:cf:14:be:87:67:35:c0:35:23:0b:34:5d:97:30:
         1d:ed:83:0c:43:d1:e9:70:15:d7:c1:50:d0:32:9d:04:20:11:
         b9:a5:17:87:52:06:3e:de:5f:18:71:4d:ea:88:a1:ba:bd:11:
         41:ac:3f:f8:13:28:43:d4:08:e4:54:d2:bc:a0:27:ff:dd:f0:
         80:67:95:bb:50:2f:87:49:21:b9:97:b7:19:69:bc:33:f6:e3:
         c6:04:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----