This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa
File:                     b448195b-84f3-4e2c-beb9-33cee532dce4.roa (raw, json)
Hash identifier:          tYAnmJvPfXDWtz+S2Ubb2WIyy3Z0EaGroIm+Z9EmeH0=
Subject key identifier:   73:2C:62:08:AD:7B:76:28:D9:11:4B:8E:2F:EE:06:B0:A2:45:4A:81
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       54C0CCB1AF1412A1A3CCF95D37851A5C2EE3F5F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa
Signing time:             Tue 11 Nov 2025 02:01:22 +0000
ROA not before:           Tue 11 Nov 2025 02:01:22 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        107.22.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c0:cc:b1:af:14:12:a1:a3:cc:f9:5d:37:85:1a:5c:2e:e3:f5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:01:22 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=0116f941004ce1303a0155a67e603732f68be2f89770651625297509aabfd625, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:e9:a5:21:56:a3:9e:6a:37:b9:39:58:96:
                    d0:d7:7b:71:ce:1e:ba:af:52:98:79:8a:74:41:c9:
                    f0:ea:5b:87:4d:21:0b:96:b4:7e:f5:cd:e4:f5:1e:
                    8c:db:ef:51:e9:68:fe:0b:1c:b7:92:35:27:26:09:
                    a1:75:ef:69:9e:63:2c:e5:ee:f8:92:f9:2c:d5:a5:
                    47:92:d4:66:28:04:04:5b:34:6c:06:e3:71:08:fd:
                    29:d0:e5:ea:47:9a:f1:92:4f:0c:e7:f3:a9:b2:8b:
                    f7:1b:bd:1f:4f:cd:a9:85:09:c8:0c:68:3d:29:f1:
                    dd:59:a3:22:77:a1:c7:bc:10:9a:c6:c1:ba:be:54:
                    d9:f4:14:e0:e0:a6:26:ab:b1:bd:98:16:5c:55:4e:
                    f5:66:f0:10:72:95:ca:f2:91:83:60:87:1b:eb:af:
                    f5:8e:7e:d9:48:85:67:6b:0a:53:b5:bc:21:86:93:
                    bc:ad:66:f9:82:32:44:2e:06:4f:50:e4:5d:63:cf:
                    da:21:1a:d5:c5:0a:fa:84:b4:8c:5c:ce:7b:05:95:
                    26:ba:df:a9:21:3d:4e:19:4a:de:79:14:2d:0c:3c:
                    82:d0:1a:8c:4c:5a:79:97:d7:5e:07:78:d9:09:20:
                    1c:8a:c0:8b:ae:39:91:eb:fd:da:ad:c8:48:99:f5:
                    d9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2C:62:08:AD:7B:76:28:D9:11:4B:8E:2F:EE:06:B0:A2:45:4A:81
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.22.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:b9:9b:d4:b6:f6:f3:b3:86:bc:88:bd:a2:55:89:8c:e4:cd:
         96:bb:45:5c:1c:99:53:92:30:2f:c4:91:5e:99:7f:29:be:ea:
         06:57:5b:3e:35:79:54:fc:d4:a9:0e:3e:fb:61:64:2d:ee:9c:
         74:49:1d:0c:d8:87:23:68:a0:d7:5a:4f:cd:f5:f5:b3:01:ed:
         f4:0c:e8:a7:e2:33:4a:60:c2:2b:ba:0e:a7:2c:d3:b5:9a:6f:
         47:08:9d:83:59:64:c7:73:61:02:90:ce:48:91:2b:63:4d:bb:
         a5:4c:11:cb:3b:2d:0e:5d:b8:52:ae:6c:1d:87:4c:55:b9:73:
         e3:cb:85:75:2d:fd:f2:ae:cf:2c:0c:a3:c0:06:fd:c6:06:11:
         34:fa:c7:db:a0:73:ce:53:54:8e:a7:02:8f:89:4a:ff:db:26:
         2d:20:3c:0e:c6:4c:24:a8:14:21:ed:9f:4c:72:e9:98:7e:6f:
         49:bc:21:0c:98:4d:c2:51:71:52:76:ac:35:e6:6b:b0:b1:e6:
         33:5e:a0:7b:78:f3:3c:65:3f:c6:6b:8a:7f:e7:f5:64:e9:21:
         93:e8:5e:12:17:45:3c:c4:24:67:ec:ac:aa:51:80:e1:e0:4d:
         76:f4:a3:04:44:89:d8:11:55:6f:f1:2d:fa:7c:5b:cf:92:d7:
         33:1a:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----