This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b076e11c-5f2a-4cd7-b4e8-793e7c3ab274.roa
File:                     b076e11c-5f2a-4cd7-b4e8-793e7c3ab274.roa (raw, json)
Hash identifier:          P6N0kSq3H1Llu4n8X/+Rhvua0ytREN6NC0LK/wxqSTM=
Subject key identifier:   FF:02:A0:63:CF:9C:6D:8E:77:AF:AA:53:85:6E:DA:D7:B9:E1:3D:2B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       443B9BCEA71B45ED8454A200328D7E78C4776140
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b076e11c-5f2a-4cd7-b4e8-793e7c3ab274.roa
Signing time:             Wed 19 Nov 2025 00:00:06 +0000
ROA not before:           Wed 19 Nov 2025 00:00:06 +0000
ROA not after:            Tue 17 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        157.152.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3b:9b:ce:a7:1b:45:ed:84:54:a2:00:32:8d:7e:78:c4:77:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 00:00:06 2025 GMT
            Not After : Feb 17 23:59:59 2026 GMT
        Subject: serialNumber=d9c861ab7c9b2d9b8890e6699f8b49843471ec2fd1dbd8ab553af4b175e2bfc4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:23:08:e1:4f:67:f8:97:a3:72:d3:91:d2:
                    ef:18:12:c9:b9:13:e9:69:2f:00:42:83:8e:6c:53:
                    da:c7:5c:3a:fb:d1:0a:3a:af:2f:9b:44:4d:4d:20:
                    98:31:b8:6e:1a:07:6d:5d:da:91:6a:98:af:03:18:
                    0b:71:b8:c1:90:dc:ab:12:88:09:db:50:c7:be:46:
                    78:f6:0b:9a:82:a0:bf:11:8d:eb:0f:a2:ce:5e:09:
                    73:c2:dc:c9:75:2b:7f:fd:83:ee:f9:be:4a:07:d5:
                    86:10:0a:67:d1:e2:33:a4:bf:ea:9f:1c:d9:1f:62:
                    c0:2b:e7:3e:9b:93:12:19:a7:e7:8c:79:33:4e:80:
                    69:0c:f0:55:0b:0f:d6:c0:4e:36:d1:e1:70:1e:22:
                    04:5a:17:0f:3e:bd:c4:33:15:69:6c:29:ba:13:1b:
                    73:80:90:76:69:a5:a3:ef:3d:e6:9f:31:d6:24:7a:
                    22:0f:04:9d:da:21:04:5c:00:0d:ad:bc:08:cf:27:
                    09:2f:99:d4:49:fb:6f:af:21:02:70:34:43:38:0a:
                    48:87:90:e4:ad:15:3d:eb:f5:3a:52:a2:6f:85:55:
                    fd:40:74:d5:0f:e1:11:7a:18:59:d7:6e:00:51:97:
                    1c:a0:af:72:81:c3:ef:59:2f:a8:9c:72:7a:fd:38:
                    d0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:02:A0:63:CF:9C:6D:8E:77:AF:AA:53:85:6E:DA:D7:B9:E1:3D:2B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b076e11c-5f2a-4cd7-b4e8-793e7c3ab274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.152.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:92:30:4f:f6:42:77:27:c4:07:9f:43:f7:fe:9c:e0:20:82:
         c6:ce:a0:ab:2c:b8:d3:07:93:f0:b9:00:2b:43:30:a3:64:6f:
         4d:a5:b3:87:15:7d:88:0e:69:79:36:a8:3f:f0:1c:0e:cc:a0:
         27:bd:c3:ca:3c:02:6e:b8:39:bf:4e:2f:22:94:33:f7:9a:8f:
         ae:c1:ef:80:ad:a3:ef:fe:31:f2:1f:65:58:a3:4d:3c:9f:e8:
         48:dd:99:f2:a0:6c:5e:13:1e:f0:97:b5:c1:98:34:f0:e6:d0:
         ec:56:8d:03:a8:83:e7:c3:ba:f5:6c:ad:92:8d:93:bc:1d:21:
         2f:7e:2b:89:1f:f6:44:10:4e:69:77:e7:d3:23:46:7b:8c:47:
         a6:79:a2:40:ed:07:8b:f5:05:82:7b:d7:21:98:d3:f3:f0:56:
         ed:ff:a7:be:32:c8:cc:0b:7c:ba:b5:ea:44:ab:5e:8e:85:ae:
         0d:21:d5:a0:05:f8:6e:2d:a4:09:11:48:32:df:6d:6e:f8:5b:
         38:1c:a2:c5:a8:2f:18:ff:27:57:fa:ed:3a:b9:6e:8d:70:5c:
         04:c6:86:ff:71:10:65:1f:01:39:c7:99:d7:28:78:5f:06:a0:
         2d:55:a0:d3:ab:cb:72:15:b3:f9:e2:4b:be:aa:7f:51:79:1e:
         a3:2f:09:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----