This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa
File:                     bc98b8a4-19f3-4303-9456-ca95391c61c5.roa (raw, json)
Hash identifier:          0FlF9TDwjjkfSZ7tBlBTZudMx6FxlHueIfJAf206e7Q=
Subject key identifier:   BE:63:23:F5:26:6E:33:F9:E6:4B:AE:B4:12:EF:9C:CD:DE:A1:F2:33
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7FEFC736CB7F78C60AA4450E05D58D903EB34DB9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa
Signing time:             Wed 12 Nov 2025 01:40:08 +0000
ROA not before:           Wed 12 Nov 2025 01:40:08 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        23.22.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ef:c7:36:cb:7f:78:c6:0a:a4:45:0e:05:d5:8d:90:3e:b3:4d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:40:08 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=f285e20048daaa51b7465e57e6d4655fabedc38874b3587eee9db70d2643034a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a3:c4:6d:d0:72:e4:f7:e3:a7:ad:56:02:01:
                    fc:d4:0a:04:ab:8c:2a:99:a5:83:f4:a2:06:c8:60:
                    16:83:62:18:5c:4d:1e:72:99:29:e0:89:92:5e:23:
                    5e:5d:dd:94:2a:49:02:fa:a5:1d:34:84:d7:d4:30:
                    81:87:21:85:e9:9b:e0:3f:45:c1:43:e5:fc:fd:b9:
                    3d:da:ee:10:6d:08:0a:7a:fd:07:52:46:55:fa:73:
                    81:6b:45:de:d4:5e:94:99:06:46:02:51:cc:dc:0b:
                    22:dd:55:d0:8d:ef:49:dd:74:e5:09:c9:c3:f4:af:
                    8e:5f:29:66:62:4f:67:72:96:87:1a:b1:ba:73:ac:
                    c0:2c:1b:f2:6a:a0:7f:6c:c1:a4:67:fd:db:30:c9:
                    16:41:0e:f1:fa:90:07:45:62:9d:95:80:e4:ce:ba:
                    83:10:87:9c:9a:b7:be:be:73:5f:36:72:e3:a1:0e:
                    9e:13:8f:40:fb:49:3f:de:af:52:8c:07:b5:11:b7:
                    40:9a:f4:8c:84:78:07:f4:0d:22:62:c0:b2:90:28:
                    a1:72:e6:f7:39:4c:2c:c8:da:4a:3d:1f:65:93:2d:
                    1e:68:f7:52:96:3d:92:8b:4d:57:f2:4b:be:6d:57:
                    c6:a3:80:f1:ff:96:c0:19:57:c8:73:28:96:46:20:
                    c3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:63:23:F5:26:6E:33:F9:E6:4B:AE:B4:12:EF:9C:CD:DE:A1:F2:33
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.22.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         86:c6:36:15:7c:4b:79:33:19:ef:b5:f8:24:48:76:36:12:5e:
         14:ef:4a:41:b2:89:da:79:17:31:dc:5a:ad:9f:31:0f:50:ae:
         a3:8a:65:8a:ae:b9:23:61:78:f5:a2:f5:8b:ce:42:02:b6:50:
         4a:8c:3b:07:26:93:0c:ec:8f:bb:c1:5d:9c:d9:07:76:ed:49:
         f5:0d:c3:6b:a6:0e:6d:95:1a:2e:2c:69:cd:72:c5:21:e8:90:
         32:d4:7e:b2:7b:c0:62:a9:4c:ab:6b:89:b6:83:cc:2c:21:27:
         8e:3e:e5:25:3e:77:98:2b:bd:22:5d:49:05:66:e6:a2:34:3c:
         7b:2b:82:84:0f:13:53:51:1d:8f:cf:b3:fd:80:15:44:48:52:
         f5:18:7f:b7:86:a1:f1:47:d3:fb:10:b7:7e:78:32:a2:9e:6e:
         97:88:8d:53:df:98:1b:c5:14:7d:dc:1b:77:9f:6a:60:8c:6a:
         be:d9:2d:99:f4:14:83:f1:0e:ea:8f:33:21:32:fe:63:4b:69:
         98:41:69:26:ab:d3:62:a6:84:23:b7:6c:51:69:9f:25:71:15:
         43:ac:fd:dc:87:47:0d:d5:82:1d:36:df:90:90:6b:ef:f5:bf:
         96:52:4f:c4:59:e0:f4:c8:07:27:41:ba:cb:90:ff:82:e2:90:
         ed:93:21:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----