This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c13c7e5c-c5bb-45ea-824f-6e1264d4c8c7.roa
File:                     c13c7e5c-c5bb-45ea-824f-6e1264d4c8c7.roa (raw, json)
Hash identifier:          STOnOeggB9XjjJbALivLvZ2O3I9xPnJ7HzqSc9rMjCw=
Subject key identifier:   93:6C:39:FE:E1:8A:78:DA:F9:54:7C:7C:60:DA:B6:A6:56:B9:02:D3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       05FA850F6626427768C538ED8A5FB7BB904B75E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c13c7e5c-c5bb-45ea-824f-6e1264d4c8c7.roa
Signing time:             Tue 11 Nov 2025 02:30:36 +0000
ROA not before:           Tue 11 Nov 2025 02:30:36 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        107.21.88.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fa:85:0f:66:26:42:77:68:c5:38:ed:8a:5f:b7:bb:90:4b:75:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:30:36 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=d7ee7ff101e0d3e02aaff5f539fefea02f48544e1e1e7a327cd414d5350936e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:ba:0a:7d:46:cf:06:70:21:79:0f:2a:d9:
                    f6:4f:08:dd:53:5a:df:ae:01:62:1e:bb:f6:0e:a7:
                    f7:9f:35:c7:5e:98:64:ee:42:a5:42:ec:dd:5a:c2:
                    c1:64:b7:54:3b:0a:36:d5:fa:e9:41:4f:e6:e6:4a:
                    17:67:be:1d:f8:9f:9b:0f:e3:7c:e7:e8:f3:a7:f0:
                    25:f3:de:15:5d:51:1d:64:cf:c4:cb:85:11:ec:a1:
                    e6:57:e0:2c:85:c1:e1:30:11:0c:9d:49:ab:29:ad:
                    bd:ae:6e:4f:07:2b:9f:ff:8e:e4:c1:8d:12:bb:1f:
                    f6:b1:6d:a5:89:11:43:b9:4c:f0:32:25:c2:ed:3f:
                    d3:a1:19:12:c8:95:1d:1a:8c:47:b5:ae:b7:41:14:
                    a1:d5:89:9d:e8:12:45:ab:8f:f7:91:1d:e4:08:c3:
                    38:9f:26:2d:a9:80:e3:bc:28:f2:9a:bc:60:77:4f:
                    26:37:b5:a3:bf:78:c9:51:fa:22:cd:aa:ff:5a:a6:
                    2b:c5:20:b6:2c:41:c8:5e:58:7f:d5:af:59:75:45:
                    2c:8b:3f:c5:de:3d:bf:f3:49:66:a4:e9:16:e5:02:
                    01:7b:5c:dc:94:4d:4b:dc:f3:5c:ee:1b:6c:4c:2d:
                    6f:8b:15:95:33:bb:5e:99:49:65:78:4a:95:c9:ce:
                    45:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6C:39:FE:E1:8A:78:DA:F9:54:7C:7C:60:DA:B6:A6:56:B9:02:D3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c13c7e5c-c5bb-45ea-824f-6e1264d4c8c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.21.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:39:27:3b:06:36:41:9f:52:58:0e:45:2a:a1:2f:79:5a:a5:
         c4:38:3b:15:4d:04:cf:4a:1d:31:2d:93:66:92:63:87:bc:79:
         13:a8:3f:57:1f:bd:bc:7b:f0:e3:c2:4d:db:3d:d6:85:ca:36:
         50:18:8f:39:ce:17:38:3a:bd:31:89:19:de:e9:92:07:1e:97:
         ab:5f:3f:fd:b2:7a:a9:b3:8c:68:9e:34:01:27:82:63:29:ee:
         dd:e1:4c:f6:d6:d1:6f:f0:a0:56:09:1e:6f:f8:e5:33:b8:37:
         8c:dd:6e:ad:b0:d7:07:71:f7:c3:a5:ac:38:8b:63:2c:c2:ec:
         97:c5:34:d0:34:e1:f2:b3:d7:1e:57:71:cb:98:cf:47:4f:14:
         de:8a:46:1e:5b:2d:c0:66:2b:de:cd:f6:d2:f9:ed:f2:ee:fe:
         11:27:68:00:75:87:15:46:25:d5:a2:f7:46:39:57:a8:f4:57:
         68:83:b3:0a:38:6b:de:b6:f9:64:f7:f0:04:20:6b:5f:12:45:
         c2:4b:9c:94:f2:9c:3a:f2:18:f2:c9:bf:0d:4b:b7:9e:d6:a2:
         ae:6b:10:36:9d:2b:75:5d:dc:ec:f9:d3:0f:ab:7c:52:d4:70:
         f3:da:e6:a7:30:5d:25:43:f2:31:73:41:05:52:cc:f9:cf:21:
         8f:f7:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----