This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92e1077e-9d06-4e11-a3c0-5bbb19b84f3b.roa
File:                     92e1077e-9d06-4e11-a3c0-5bbb19b84f3b.roa (raw, json)
Hash identifier:          JfpbkgOxJ2UOoWdKkDj5SnechYvw51YC3Ato8HWu1SU=
Subject key identifier:   21:82:66:74:8C:D9:2A:2B:D3:FC:BD:E3:D6:DA:DD:A4:CD:F7:E3:EF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4C7C5B9B9B061B456AA60D998F14170F3BB3F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92e1077e-9d06-4e11-a3c0-5bbb19b84f3b.roa
Signing time:             Tue 11 Nov 2025 02:00:07 +0000
ROA not before:           Tue 11 Nov 2025 02:00:07 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        161.193.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7c:5b:9b:9b:06:1b:45:6a:a6:0d:99:8f:14:17:0f:3b:b3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:00:07 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=55f19806078973f2059f62485ca75aef04be0b65b70a5c708a6f0a4bd9071a19, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9b:c1:38:0d:5f:01:d0:7d:f9:a2:4d:a2:58:
                    9e:e0:72:ef:77:9e:46:56:00:b4:b0:de:83:b6:10:
                    49:cb:41:7e:5e:44:d4:b7:1b:07:32:a9:4f:4b:fd:
                    10:b7:36:30:09:ac:20:a2:8b:37:b6:98:bb:28:96:
                    0a:9f:bc:db:f9:80:6a:7f:bb:c2:4c:87:a8:a8:3a:
                    8e:4e:a1:ee:36:65:d2:97:9f:b3:f0:59:71:3e:27:
                    fb:69:88:30:82:b3:a7:2b:d0:93:15:3f:d4:cb:5c:
                    3e:f0:62:13:ed:71:f5:29:44:46:00:b8:a0:82:e9:
                    c3:49:38:10:8c:1a:bd:4a:0c:27:25:85:83:82:8a:
                    58:dd:43:e1:6c:fa:ef:e9:d9:53:49:61:98:7d:21:
                    eb:9c:55:f8:1c:7d:bf:26:54:94:8c:01:85:f4:09:
                    93:0e:5d:19:8a:1a:43:b0:03:b8:73:87:55:bc:ec:
                    89:22:64:c9:ec:df:1f:40:07:8f:af:30:93:91:8e:
                    28:fd:98:c6:d4:f7:5f:49:7c:37:73:35:e9:4f:81:
                    6f:46:5c:e3:fa:da:43:79:29:c6:cb:30:4c:9e:81:
                    96:56:c2:34:a4:69:0a:5a:22:92:ae:4b:a0:d6:94:
                    ee:74:b3:18:98:cc:dc:e7:1a:b3:26:f7:9e:da:d5:
                    53:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:82:66:74:8C:D9:2A:2B:D3:FC:BD:E3:D6:DA:DD:A4:CD:F7:E3:EF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92e1077e-9d06-4e11-a3c0-5bbb19b84f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.193.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7f:3d:8a:83:f8:e5:b0:e0:9c:c3:46:a1:f4:ac:de:3f:be:38:
         4c:c1:cb:00:81:28:e3:ef:47:67:f6:2a:ec:0b:c2:08:c5:0b:
         d4:57:c7:4a:20:60:76:be:c8:0c:11:f0:00:7c:2e:ef:9e:88:
         0d:b8:42:e3:e8:7a:c9:26:52:c1:55:28:4a:26:e0:00:2e:d1:
         71:97:90:02:74:f3:9a:98:ae:17:20:9d:67:d4:42:b7:67:c8:
         42:f5:70:34:76:7b:ef:e5:f6:2b:6d:e8:9e:03:16:7d:42:2b:
         6e:06:8c:51:b7:a6:be:90:2a:8d:38:31:40:40:86:93:75:bc:
         77:ca:82:34:36:08:93:a6:d5:bc:66:b7:3c:94:64:b5:fe:9a:
         02:fc:0d:fb:ac:39:a1:5a:dc:ab:14:2a:a0:64:80:f3:29:55:
         a2:88:a4:30:85:65:c8:72:af:d6:d0:f5:33:f3:3d:54:06:a3:
         02:c6:28:d2:4f:49:56:a6:3b:25:f9:1a:a3:73:63:83:c3:58:
         77:cd:a9:14:b5:69:b2:f3:9a:0c:a8:b1:92:63:ab:81:ad:ad:
         7d:52:54:96:17:1a:31:e5:22:e3:5a:e4:c8:77:a5:07:2a:7a:
         60:0b:89:a7:f5:34:08:0d:5c:b9:2a:a7:3e:22:e0:ba:63:92:
         4a:54:86:6c
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITTHxbm5sGG0Vqpg2ZjxQXDzuz8TANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNTExMTEwMjAwMDdaFw0yNTEyMTYyMzU5NTla
MHoxSTBHBgNVBAUTQDU1ZjE5ODA2MDc4OTczZjIwNTlmNjI0ODVjYTc1YWVmMDRi
ZTBiNjViNzBhNWM3MDhhNmYwYTRiZDkwNzFhMTkxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJmbwTgNXwHQffmiTaJYnuBy73eeRlYAtLDeg7YQSctBfl5E
1LcbBzKpT0v9ELc2MAmsIKKLN7aYuyiWCp+82/mAan+7wkyHqKg6jk6h7jZl0pef
s/BZcT4n+2mIMIKzpyvQkxU/1MtcPvBiE+1x9SlERgC4oILpw0k4EIwavUoMJyWF
g4KKWN1D4Wz67+nZU0lhmH0h65xV+Bx9vyZUlIwBhfQJkw5dGYoaQ7ADuHOHVbzs
iSJkyezfH0AHj68wk5GOKP2YxtT3X0l8N3M16U+Bb0Zc4/raQ3kpxsswTJ6BllbC
NKRpCloikq5LoNaU7nSzGJjM3Ocasyb3ntrVU/sCAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBQhgmZ0jNkqK9P8vePW2t2kzffj7zAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvOTJlMTA3N2UtOWQwNi00ZTExLWEzYzAtNWJiYjE5Yjg0ZjNiLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBaHBADANBgkqhkiG9w0BAQsFAAOCAQEAfz2Kg/jlsOCcw0ah9KzeP744TMHL
AIEo4+9HZ/Yq7AvCCMUL1FfHSiBgdr7IDBHwAHwu756IDbhC4+h6ySZSwVUoSibg
AC7RcZeQAnTzmpiuFyCdZ9RCt2fIQvVwNHZ77+X2K23ongMWfUIrbgaMUbemvpAq
jTgxQECGk3W8d8qCNDYIk6bVvGa3PJRktf6aAvwN+6w5oVrcqxQqoGSA8ylVooik
MIVlyHKv1tD1M/M9VAajAsYo0k9JVqY7Jfkao3Njg8NYd82pFLVpsvOaDKixkmOr
ga2tfVJUlhcaMeUi41rkyHelByp6YAuJp/U0CA1cuSqnPiLgumOSSlSGbA==
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:35:00 2025 by rpki-client