This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8921bbf-47e4-4d8a-8954-9d95e5a78862.roa
File:                     c8921bbf-47e4-4d8a-8954-9d95e5a78862.roa (raw, json)
Hash identifier:          AaQgni9/EjIQskfg5gIpO9qL0g1BlUPAs/ivEO1AHv4=
Subject key identifier:   68:3C:C0:F5:81:02:A1:24:76:7B:52:93:29:69:E4:1A:87:D4:B5:9E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1FF8D04D55CBDEE031F4D757DEAB7D93F07FD6B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8921bbf-47e4-4d8a-8954-9d95e5a78862.roa
Signing time:             Wed 19 Nov 2025 00:10:07 +0000
ROA not before:           Wed 19 Nov 2025 00:10:07 +0000
ROA not after:            Tue 17 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        16.165.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f8:d0:4d:55:cb:de:e0:31:f4:d7:57:de:ab:7d:93:f0:7f:d6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 19 00:10:07 2025 GMT
            Not After : Feb 17 23:59:59 2026 GMT
        Subject: serialNumber=b6ab964e928ec62c5b18768a80531e0474c3fefbae87edbf8c44670e33af073d, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:12:14:8e:b5:e5:8a:af:44:9c:fb:85:03:
                    f7:6d:37:d3:18:ab:42:cd:64:da:6d:4a:5c:45:4d:
                    89:8a:7a:63:cc:b3:8a:65:82:75:59:fd:84:5e:06:
                    73:ea:a7:6a:39:72:1c:08:f7:6b:55:ca:e0:26:9c:
                    dd:28:d3:62:39:89:a7:fd:a6:35:43:6a:45:18:fd:
                    e2:cf:8d:be:68:59:75:5a:64:c3:d3:89:37:f3:46:
                    0b:2d:cd:1c:48:b1:bb:55:cf:fa:dc:1a:0f:ff:70:
                    87:82:42:07:d5:28:bc:85:ce:ed:89:63:5a:95:b7:
                    b3:38:bd:19:43:54:11:94:6f:95:4c:9d:61:65:d6:
                    66:cf:55:52:44:23:fd:8f:8b:3a:21:d7:55:fe:eb:
                    a9:f0:2c:8b:93:fe:a9:00:32:e2:fc:e9:ae:54:8b:
                    99:45:a2:dc:d6:af:9e:b5:4c:73:de:0b:a9:80:d4:
                    45:b5:3d:02:28:bd:f7:0e:78:fa:53:8d:e9:e9:7c:
                    d6:7a:80:40:ea:88:90:c6:7a:fa:62:a8:e1:b3:2e:
                    3b:51:01:f2:2b:ea:30:b9:68:87:b9:91:8a:dc:be:
                    42:a3:b2:8d:80:cf:6c:67:2e:1a:5f:11:31:55:54:
                    0a:af:3c:a6:9c:84:92:49:c2:60:a4:6b:96:8e:b7:
                    87:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3C:C0:F5:81:02:A1:24:76:7B:52:93:29:69:E4:1A:87:D4:B5:9E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8921bbf-47e4-4d8a-8954-9d95e5a78862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         88:ab:76:27:4b:da:19:9d:2c:00:87:f2:57:75:70:32:4b:39:
         12:82:7f:e6:1f:cd:5e:b3:99:83:52:5a:90:fc:cf:08:4e:d3:
         d7:62:d5:b2:ee:67:6c:c4:87:62:05:95:ae:b6:04:b9:c4:af:
         9e:80:1f:c0:e6:47:80:9f:5b:78:b7:8d:99:28:c2:1b:f5:05:
         81:63:77:8b:31:99:04:f2:ea:a4:fa:7d:0f:a8:4f:f9:7b:5e:
         f4:d5:ef:b5:18:2a:1c:ab:3a:ee:b8:7d:d8:61:9c:d9:87:6b:
         b2:b5:81:f3:58:b8:5a:f9:9e:25:2b:b1:0a:56:d7:10:f9:76:
         8f:c2:70:10:7f:47:bc:d5:85:06:f0:69:cc:af:51:53:8f:96:
         18:df:b8:4d:f0:40:62:f8:f5:cd:00:73:58:a0:dc:e4:03:3a:
         28:42:11:c4:57:d8:86:04:56:0a:64:35:4f:de:1a:bc:cf:fd:
         68:65:eb:3f:02:98:bb:af:4f:13:32:40:55:93:94:ee:9e:93:
         62:88:c9:43:a3:ca:b6:16:be:09:a4:44:8f:71:9f:dc:6a:00:
         d4:dc:54:d4:75:71:c4:6a:bc:e6:c7:a1:b8:27:83:ee:07:5b:
         a0:cc:1b:37:6e:de:60:68:2d:17:3b:62:c7:f8:f8:8a:a1:b8:
         f5:08:74:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----