This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9655f4ce-87f0-4d76-863e-8032d78fbca6.roa
File:                     9655f4ce-87f0-4d76-863e-8032d78fbca6.roa (raw, json)
Hash identifier:          3Ay9qW4LR+qbYhxHyHwGGLiqBdRuj9xh0GhnNjLRyKo=
Subject key identifier:   26:D6:55:07:00:60:A9:E3:6F:0A:B5:5C:04:4A:7B:7F:0D:72:6B:72
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       774D35FB85A7DF5F5D6A3469435E08DFDF9E6B75
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9655f4ce-87f0-4d76-863e-8032d78fbca6.roa
Signing time:             Thu 13 Nov 2025 00:21:27 +0000
ROA not before:           Thu 13 Nov 2025 00:21:27 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fed:8000::/39 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:4d:35:fb:85:a7:df:5f:5d:6a:34:69:43:5e:08:df:df:9e:6b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:21:27 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=0bfc689af73919920da5b4d8076fcc3147d5aecd0894fa69b9d60d97ad4c54d0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:42:2c:bf:3a:03:04:9e:94:45:69:2f:02:d1:
                    a9:b2:66:4f:72:c6:1d:f9:14:46:b1:74:51:76:37:
                    36:77:20:d8:fa:ee:45:30:9e:a3:bf:3d:3f:cc:ea:
                    21:46:ca:aa:76:67:77:15:cb:fa:39:21:45:42:bd:
                    95:89:33:67:a9:ad:fd:af:05:1b:44:ac:61:63:6a:
                    9b:3b:1d:43:ac:75:80:47:57:f1:04:0f:b7:bb:7e:
                    5f:a3:32:1e:3f:0d:d6:aa:c1:9b:95:17:e7:bd:58:
                    f0:d2:41:f8:8c:e6:d2:70:aa:3a:02:eb:97:fb:df:
                    76:1c:1a:22:8b:f3:59:ac:13:da:14:9b:4b:99:7f:
                    5c:71:ce:c5:8d:90:a7:24:48:0a:19:97:71:01:6c:
                    b0:18:b5:bf:3d:f7:30:b1:49:57:5c:00:d2:f2:3b:
                    fd:b0:d8:ec:c6:6c:c3:da:51:b9:78:f5:85:c7:2a:
                    a4:d6:82:ff:88:1d:cd:80:1e:4e:29:7d:66:74:81:
                    e3:f4:b9:0a:57:7c:54:f5:6e:6f:41:4c:55:03:42:
                    ea:49:c7:28:5c:26:3b:2a:a3:be:a7:cd:56:88:ab:
                    8d:14:ff:90:a8:72:9a:6b:39:0f:2f:5a:0c:5d:5c:
                    b9:e0:ee:ae:05:da:33:ee:f2:d0:c2:6e:5e:9e:bf:
                    3b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D6:55:07:00:60:A9:E3:6F:0A:B5:5C:04:4A:7B:7F:0D:72:6B:72
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9655f4ce-87f0-4d76-863e-8032d78fbca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fed:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         8b:da:a0:6e:e1:d9:d6:bb:f2:e1:e8:65:3e:9b:be:bc:c5:29:
         aa:37:86:d0:b0:49:9d:04:21:aa:9e:e6:39:04:fa:c4:d8:18:
         44:9a:6a:c7:5a:42:5d:85:18:d6:92:1f:b8:f3:be:02:9d:60:
         0d:99:ea:42:53:f2:81:b6:a0:57:5d:88:cf:33:6e:ca:51:d1:
         7e:c2:ee:4b:f6:a1:7e:b6:57:1e:26:55:0e:44:c8:a3:ad:d6:
         09:f1:b8:e5:d3:12:94:88:83:37:c5:2e:90:5d:4d:26:04:cc:
         c3:e2:26:d0:56:da:61:56:5c:79:c8:88:8c:e3:b6:51:6a:6d:
         e6:c4:69:9b:33:f8:e7:d7:d5:62:e6:33:42:82:a6:17:43:fa:
         9e:69:ac:58:c6:d7:23:a3:70:b0:bc:cd:05:3a:46:24:5c:69:
         3a:f1:13:99:5d:be:61:98:fd:28:f3:91:79:79:fe:96:2e:88:
         db:1c:31:f9:fb:83:6c:8c:60:9c:9c:9c:e7:d2:c3:a2:39:dd:
         f7:96:07:9a:52:bc:1b:bd:23:dd:fb:61:e2:ec:fc:57:db:06:
         03:e0:04:c5:76:2a:43:d4:05:41:57:29:e8:be:d5:b8:c4:cf:
         fc:54:8d:6b:ce:e1:ae:c8:80:2a:dc:95:39:a4:7b:3d:f8:f7:
         78:9d:94:50
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUd001+4Wn319dajRpQ14I39+ea3UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEzMDAyMTI3WhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AwYmZjNjg5YWY3MzkxOTkyMGRhNWI0ZDgwNzZmY2MzMTQ3
ZDVhZWNkMDg5NGZhNjliOWQ2MGQ5N2FkNGM1NGQwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcQiy/OgMEnpRFaS8C0amyZk9yxh35FEaxdFF2NzZ3INj6
7kUwnqO/PT/M6iFGyqp2Z3cVy/o5IUVCvZWJM2eprf2vBRtErGFjaps7HUOsdYBH
V/EED7e7fl+jMh4/DdaqwZuVF+e9WPDSQfiM5tJwqjoC65f733YcGiKL81msE9oU
m0uZf1xxzsWNkKckSAoZl3EBbLAYtb899zCxSVdcANLyO/2w2OzGbMPaUbl49YXH
KqTWgv+IHc2AHk4pfWZ0geP0uQpXfFT1bm9BTFUDQupJxyhcJjsqo76nzVaIq40U
/5CocpprOQ8vWgxdXLng7q4F2jPu8tDCbl6evzs5AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUJtZVBwBgqeNvCrVcBEp7fw1ya3IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk2NTVmNGNlLTg3ZjAtNGQ3Ni04NjNlLTgwMzJkNzhmYmNhNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAB/tgDANBgkqhkiG9w0BAQsFAAOCAQEAi9qgbuHZ1rvy4ehlPpu+vMUp
qjeG0LBJnQQhqp7mOQT6xNgYRJpqx1pCXYUY1pIfuPO+Ap1gDZnqQlPygbagV12I
zzNuylHRfsLuS/ahfrZXHiZVDkTIo63WCfG45dMSlIiDN8UukF1NJgTMw+Im0Fba
YVZceciIjOO2UWpt5sRpmzP459fVYuYzQoKmF0P6nmmsWMbXI6NwsLzNBTpGJFxp
OvETmV2+YZj9KPOReXn+li6I2xwx+fuDbIxgnJyc59LDojnd95YHmlK8G70j3fth
4uz8V9sGA+AExXYqQ9QFQVcp6L7VuMTP/FSNa87hrsiAKtyVOaR7Pfj3eJ2UUA==
-----END CERTIFICATE-----