This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cc3dcca-f38b-489c-bde1-d8d8aaf3901c.roa
File:                     9cc3dcca-f38b-489c-bde1-d8d8aaf3901c.roa (raw, json)
Hash identifier:          pBv0KXLYG4XjkQ/Fg1C5LApLJXi3T5KREkCT7ajzDPA=
Subject key identifier:   CB:A9:3D:56:BA:4B:5E:9D:F9:6D:04:D5:7B:8E:92:CF:6F:6B:99:CB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       327CBF49A6D66186B4FFFDD764EBE1A3D61DCBA6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cc3dcca-f38b-489c-bde1-d8d8aaf3901c.roa
Signing time:             Thu 13 Nov 2025 00:41:39 +0000
ROA not before:           Thu 13 Nov 2025 00:41:39 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        136.8.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7c:bf:49:a6:d6:61:86:b4:ff:fd:d7:64:eb:e1:a3:d6:1d:cb:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:41:39 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=6449faa390e7876bb1c73bc3eba7a99120d080d06dbff5241877cf282e3e6f83, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f0:f1:7d:0f:59:0f:e2:fa:c3:d8:f1:ec:15:
                    ef:d1:55:ad:52:ee:08:e2:66:67:bc:e8:8f:44:7e:
                    d6:6d:e5:af:fe:4c:e9:f4:39:c6:dc:d4:16:18:26:
                    c1:8b:d3:d2:98:83:4c:dd:fb:41:46:e1:58:d2:4f:
                    ca:86:68:79:df:09:28:f1:ab:31:4c:4d:b1:ca:61:
                    5a:6b:90:0f:7a:48:dd:54:b9:99:74:19:09:ec:6b:
                    a4:79:9b:f9:74:67:ac:4b:00:93:ba:23:08:81:2b:
                    24:c0:b5:89:5f:58:52:18:fd:45:66:c2:05:21:64:
                    36:57:4d:3e:fb:21:a1:0e:3a:2e:76:7b:3b:e3:6f:
                    e1:8d:4e:2e:24:c1:80:0d:ce:55:8c:60:89:3f:49:
                    1a:84:7e:17:80:1c:01:c1:65:79:78:bb:22:4a:3c:
                    06:bb:0b:f1:d5:ce:21:5a:ce:33:11:d2:39:00:5d:
                    1f:dd:66:48:d5:6f:f3:10:99:e1:6c:96:66:eb:72:
                    d1:f1:e0:48:5d:ad:3b:44:53:c3:e7:b0:16:88:4c:
                    c9:ac:21:17:d5:ce:22:da:2a:8a:83:a7:60:30:b2:
                    d1:ab:94:33:14:94:e9:5d:36:68:5b:c2:f6:e0:a5:
                    62:a1:19:79:7a:6e:83:71:ef:df:08:67:29:94:15:
                    c0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A9:3D:56:BA:4B:5E:9D:F9:6D:04:D5:7B:8E:92:CF:6F:6B:99:CB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cc3dcca-f38b-489c-bde1-d8d8aaf3901c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.8.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         41:1c:6e:28:33:a9:76:8c:7a:28:54:6e:b5:c5:b1:22:e6:95:
         ce:99:89:da:a0:ff:2e:34:5e:49:2e:76:ca:ce:0b:42:d9:40:
         c2:38:c5:44:80:d6:ef:d7:af:99:6a:5a:1b:65:49:1a:4b:8f:
         3a:7c:6c:88:e4:a0:cf:3e:bf:49:15:6b:39:fe:e5:18:52:67:
         3b:90:22:4c:15:3b:60:35:eb:40:4d:ce:23:a5:04:0d:4f:bc:
         e5:d6:fe:39:74:a4:e0:ba:70:aa:d3:85:2a:8b:94:ec:71:fd:
         ff:a3:60:dc:36:77:fe:61:8c:d0:c9:dc:af:5e:51:6c:c4:d6:
         ae:50:1b:bf:89:26:67:97:89:2c:8e:06:57:51:9d:d8:74:7c:
         c7:96:b0:0a:80:48:eb:ef:73:93:2c:71:8d:39:50:f4:bc:82:
         db:1f:4d:aa:fd:34:b8:11:6a:48:67:f9:d9:61:f5:f7:ed:8e:
         6b:2a:23:ee:00:81:cd:fe:58:9c:e6:20:3c:64:16:b4:d2:05:
         40:10:87:bd:91:b8:c0:40:4b:d7:a0:d2:42:9e:50:8d:88:0a:
         10:2e:0f:fa:65:f4:49:91:48:b8:35:70:88:04:67:ff:92:11:
         77:59:30:24:c7:c0:c2:9e:a2:8f:da:02:0b:92:a2:91:86:e2:
         94:ef:77:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----