This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/998b9d87-46d7-45d1-85e8-62d6d8298271.roa
File:                     998b9d87-46d7-45d1-85e8-62d6d8298271.roa (raw, json)
Hash identifier:          llAL3z+gQxfq9EQ71unf+XPrlyQEthHrwlkEEY7p3lU=
Subject key identifier:   AA:CB:C0:C2:C3:F3:75:F8:E2:ED:52:81:50:D9:1C:3B:37:9D:3B:46
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7BEF3C50B6A76632E3A61A5BE29D94ECA65255D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/998b9d87-46d7-45d1-85e8-62d6d8298271.roa
Signing time:             Sat 22 Nov 2025 00:10:35 +0000
ROA not before:           Sat 22 Nov 2025 00:10:35 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:1f32:2000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ef:3c:50:b6:a7:66:32:e3:a6:1a:5b:e2:9d:94:ec:a6:52:55:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:10:35 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=d40d5d465b22698fa7965002f4dbe98d1bb9ef725402ae0802208a6d85296c69, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:89:e8:5c:e1:d7:2e:ac:08:5e:6b:ee:c8:15:
                    f9:7e:d0:06:c4:7f:86:00:fb:46:c8:0d:ce:f0:d1:
                    0c:6d:59:66:c3:e9:98:9f:f2:24:9d:11:92:b3:71:
                    50:4c:95:42:1e:5a:22:8b:9e:9e:cd:79:61:2f:af:
                    25:fe:74:58:c9:fe:6e:04:b8:79:ec:c5:c4:dd:6b:
                    17:2d:1f:3e:8c:3d:5f:06:36:b7:1b:4a:9d:f8:52:
                    8d:dc:35:60:da:9f:8b:b8:09:bf:31:38:ce:16:f8:
                    db:0a:d2:dd:3a:d3:30:ec:6e:70:f8:83:10:ef:8d:
                    de:e7:99:0a:38:3f:41:92:01:3f:7d:9a:4a:7f:41:
                    5c:5a:93:b9:08:2c:a3:c8:82:f6:d6:6a:34:c3:64:
                    70:79:79:8c:ef:c3:17:a3:e8:72:e9:d6:87:2c:24:
                    ec:86:8d:36:39:c4:13:a9:55:d8:19:c8:71:b9:e4:
                    32:8e:08:4a:3e:9c:0f:c9:71:bf:e4:c4:7d:3e:9f:
                    77:3c:51:c1:0d:71:d0:14:59:91:e8:21:8d:a0:90:
                    2a:96:cc:e4:bc:71:f1:99:a8:2d:ea:35:a9:08:18:
                    ed:b9:48:13:b6:ab:b2:6c:77:e4:52:d0:6d:d3:95:
                    33:6c:8d:57:fe:29:bb:3b:90:8e:fe:6c:0e:82:c0:
                    9d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CB:C0:C2:C3:F3:75:F8:E2:ED:52:81:50:D9:1C:3B:37:9D:3B:46
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/998b9d87-46d7-45d1-85e8-62d6d8298271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f32:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:35:2c:d3:02:f1:c4:39:64:2b:78:5e:10:cd:06:3f:9f:16:
         61:4a:40:02:5f:17:2d:70:2b:8b:22:8b:d2:36:ad:17:e7:34:
         2c:f6:cf:d7:5b:0f:53:57:dc:1b:e3:5f:98:8e:0a:59:e0:69:
         12:20:fa:49:a7:09:85:b7:ac:b3:f1:b6:c3:12:53:b5:f0:c0:
         9b:28:51:b7:f0:cc:5c:c9:7e:78:3b:f8:52:81:8f:6b:25:a3:
         a4:8d:78:90:b4:af:a0:0a:bb:84:1d:88:8a:72:8c:67:39:6c:
         9e:e9:78:01:13:45:09:5e:78:4e:c7:4b:74:59:29:dd:54:97:
         e7:03:f9:30:f7:41:b4:1b:87:96:a9:4b:18:c8:80:c7:3c:60:
         e7:47:ca:7e:d7:76:f8:a8:8b:f8:ab:3c:46:38:dc:98:60:29:
         73:fc:34:70:a1:98:6f:a0:9b:ce:25:6e:4f:4b:a9:c6:1e:6f:
         ad:df:53:c8:31:dc:6e:dc:42:32:cc:86:5a:ed:a0:16:ba:a6:
         00:c2:12:90:16:8f:7c:ae:51:ef:2f:e0:76:09:8a:17:29:59:
         f0:73:95:b4:42:1f:ff:39:14:4e:3b:73:bd:12:0e:31:15:ba:
         d5:64:47:14:a6:7e:b0:00:ea:ed:6b:8b:50:4c:70:b1:7a:8f:
         b7:ce:d3:1e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----