This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9780a550-381e-44cf-be29-bd26404f8240.roa
File:                     9780a550-381e-44cf-be29-bd26404f8240.roa (raw, json)
Hash identifier:          MyuU9I2r3+LavAhCIh3711wf2PBn1DRfsFYdoQAJGFo=
Subject key identifier:   A1:11:E9:41:E7:1C:0B:60:9B:08:10:54:18:F1:D2:16:A4:4E:71:F2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3CB741FE91A281175AF628F6DABF68D1B01291E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9780a550-381e-44cf-be29-bd26404f8240.roa
Signing time:             Tue 11 Nov 2025 00:50:05 +0000
ROA not before:           Tue 11 Nov 2025 00:50:05 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        15.225.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b7:41:fe:91:a2:81:17:5a:f6:28:f6:da:bf:68:d1:b0:12:91:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 00:50:05 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=21d8897e7e8f3b909a8ffbdb780e77e8272c738601715008928423056756720c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:86:bb:09:fe:6b:c0:28:fe:72:dd:9a:37:44:
                    19:36:f3:1a:c9:92:a9:e1:84:90:da:0d:ec:36:06:
                    24:5b:3a:db:77:2a:8f:c0:8a:3c:ef:97:48:d4:72:
                    af:65:4a:42:38:50:99:52:22:4b:03:98:7b:de:54:
                    ce:e4:d6:9a:5f:9b:4e:5c:76:a5:72:e8:79:a8:31:
                    53:e8:fd:64:75:ca:b6:54:66:4f:64:19:77:7b:d1:
                    9b:55:3d:a3:b6:4e:2c:40:41:ad:16:63:04:fe:cf:
                    04:4f:b4:33:68:32:d6:e9:b5:59:6a:04:51:d9:b5:
                    8f:ed:cb:47:67:4a:b6:cc:15:e5:dd:bd:0f:09:95:
                    8c:30:c7:aa:19:cd:9b:76:03:0f:84:f2:4c:83:62:
                    51:4f:0c:0d:5a:3f:55:87:d0:9f:48:3a:6d:b7:2e:
                    ba:40:a1:21:1f:37:40:49:06:4e:b5:e9:ed:7b:18:
                    36:fa:4b:f4:d9:95:53:fb:23:08:f3:6d:cf:e8:c1:
                    2b:de:e7:db:0b:32:44:81:6c:87:da:ed:9d:5d:b0:
                    81:29:b6:72:d6:d8:37:6a:46:9f:65:82:c1:cc:31:
                    0c:6f:63:ac:23:d4:92:86:d2:93:d3:06:15:b3:4c:
                    3e:51:3c:43:0b:c8:98:08:0d:bd:8e:70:1f:8f:69:
                    9f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:11:E9:41:E7:1C:0B:60:9B:08:10:54:18:F1:D2:16:A4:4E:71:F2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9780a550-381e-44cf-be29-bd26404f8240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bc:62:dc:f0:3d:9b:82:ea:aa:a7:69:9d:5c:89:f5:e8:0a:05:
         b5:a3:db:71:7d:7f:92:fa:9c:78:f7:9a:08:e9:d4:26:52:32:
         3e:d0:dc:b6:ac:d0:70:9e:02:df:75:14:c8:f7:7f:44:9e:f8:
         99:81:58:dd:0b:1a:a3:37:70:c7:27:c3:1e:a1:46:fd:72:b5:
         fb:be:8a:a6:02:54:c4:21:14:3b:6a:90:3f:16:72:44:0c:a6:
         83:6b:ba:33:7f:31:ff:6f:ed:0a:af:46:e8:0b:dc:88:9d:dd:
         bd:fe:d7:c2:4a:f0:a8:77:d2:69:2b:7f:9e:0d:78:af:04:a0:
         62:e6:4e:c6:66:b7:3b:0c:1b:3e:39:62:e3:ac:a8:b6:d8:db:
         e7:32:97:6f:fb:7d:e1:f1:3b:c2:95:7a:c4:90:e5:0d:4f:fe:
         5b:fa:86:18:c7:95:a6:f2:84:23:97:94:e8:bb:3b:d4:39:87:
         59:e1:43:28:64:e4:dc:1d:64:f3:5e:85:10:95:e9:e7:cc:a8:
         12:3d:71:4f:86:ec:8f:b8:e2:7e:18:da:d9:08:a6:9d:25:7b:
         0a:8a:7b:cf:42:58:ad:90:2c:94:df:3c:9d:34:6a:7f:2e:97:
         da:4c:6c:34:35:9c:b7:c9:e2:23:2c:02:0e:59:03:81:94:96:
         81:88:02:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----