This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a86ce653-a267-4a99-b0c5-99b2a3c45792.roa
File:                     a86ce653-a267-4a99-b0c5-99b2a3c45792.roa (raw, json)
Hash identifier:          1zrOB5336S7fQ+RunCfyt5h3QY/CpJVBgUVeEiyxU8o=
Subject key identifier:   0F:D5:4B:9E:CE:DD:46:E1:ED:CC:C2:78:78:91:50:C5:37:88:FB:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       73C250A5F1BA022BAA8F81FBE56F045297120CAD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a86ce653-a267-4a99-b0c5-99b2a3c45792.roa
Signing time:             Wed 12 Nov 2025 01:00:45 +0000
ROA not before:           Wed 12 Nov 2025 01:00:45 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        23.21.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c2:50:a5:f1:ba:02:2b:aa:8f:81:fb:e5:6f:04:52:97:12:0c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:00:45 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=ee040d0722a193dcd9d50be6454d29a1a2ca621d5e6b5c10b46f910bb928c883, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:85:f8:33:b1:7a:ea:e0:7c:ba:5c:1e:17:
                    e7:7c:5f:1f:f0:6d:39:95:a6:c3:3f:87:48:fd:19:
                    71:72:d4:97:d4:3f:0f:a4:4f:d9:57:66:b2:94:9f:
                    62:63:94:ab:f2:93:83:24:75:9d:01:25:c0:3b:e0:
                    9c:90:c9:8c:f4:80:57:e3:ba:25:18:80:c7:6c:9f:
                    31:68:76:d5:f8:e5:39:fc:1c:29:df:da:44:17:f0:
                    87:64:50:51:bc:ef:c9:37:cd:84:15:75:17:57:5f:
                    57:20:bc:bb:ba:e5:36:6b:c4:2a:7f:5b:98:ee:d9:
                    e9:e0:c9:cd:5a:04:f1:7b:c2:fc:18:ca:25:a9:52:
                    0c:bd:94:c7:a5:e9:83:84:db:be:6f:af:6c:05:46:
                    af:cd:cb:d2:4a:8f:6e:91:fd:c4:9e:fb:89:cb:46:
                    da:d5:2d:a6:27:e7:1c:e4:4f:00:0c:ff:3d:ba:a3:
                    76:4c:0f:0a:91:fc:28:aa:02:c7:c7:ba:40:49:e8:
                    57:a0:f6:78:72:80:e0:54:f3:2e:f5:a7:a8:af:ea:
                    d7:01:27:31:42:f8:99:81:5f:23:30:b8:97:41:33:
                    88:b3:38:3b:d6:fc:40:6d:07:9d:a1:5d:27:88:b2:
                    e1:c9:1c:cf:1c:41:05:9a:d8:a6:c3:4d:5c:67:d4:
                    00:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D5:4B:9E:CE:DD:46:E1:ED:CC:C2:78:78:91:50:C5:37:88:FB:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a86ce653-a267-4a99-b0c5-99b2a3c45792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.21.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:82:d3:67:66:e4:40:30:dc:0b:3f:a0:0e:d4:52:97:03:9f:
         b5:0d:f3:d0:22:35:1e:0a:87:b3:bd:a0:92:e6:9e:b3:88:41:
         13:de:cd:42:89:24:f1:4f:6f:28:ea:71:46:38:8b:c7:4b:d8:
         e8:ca:ad:9b:5f:a2:dd:86:1b:ba:0b:71:a3:99:e8:f0:d6:39:
         3e:98:72:01:0e:5c:78:3d:cf:95:19:98:b9:fe:80:53:2a:d7:
         07:d6:06:70:e2:0d:db:03:d5:b9:d6:91:4c:54:39:12:93:d9:
         f7:f3:94:84:66:3c:8e:4a:d2:7f:a1:3a:59:d1:26:aa:bf:77:
         ba:6c:6b:3c:c5:19:03:e9:c3:0b:d2:84:b2:23:ae:67:2c:c7:
         10:6e:64:4c:51:85:31:c4:80:0d:d2:73:da:84:b0:bd:16:3c:
         31:a9:37:cc:fb:76:c4:c7:25:c8:e0:96:c9:b9:cc:57:db:eb:
         18:2c:ad:5f:4a:cf:92:c0:a4:ba:96:1a:48:b6:31:54:2a:78:
         c5:87:1c:2e:ee:77:72:1d:8f:b2:dd:62:2d:c8:5c:a4:97:5f:
         8f:1c:3c:9c:be:1b:a4:1e:bb:e1:cc:88:a9:d7:4c:1b:a0:f0:
         a4:06:fb:aa:4a:30:8c:e8:92:54:0f:95:c6:32:90:78:d1:f6:
         31:5c:18:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----