This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d44f1594-4df6-4ab4-ab16-494a8e9f5f41.roa
File:                     d44f1594-4df6-4ab4-ab16-494a8e9f5f41.roa (raw, json)
Hash identifier:          tFWgPfXpCYxnuImYkQlGXzcPTp5QyGssCokj1jsfCY4=
Subject key identifier:   85:E4:38:B2:8C:F0:4A:7E:A8:04:43:93:78:F4:05:3F:6D:C2:FE:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       200397A98CD2B91243D50246B1BF97B0F448A3C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d44f1594-4df6-4ab4-ab16-494a8e9f5f41.roa
Signing time:             Tue 11 Nov 2025 02:00:51 +0000
ROA not before:           Tue 11 Nov 2025 02:00:51 +0000
ROA not after:            Tue 16 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fff:81a0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:03:97:a9:8c:d2:b9:12:43:d5:02:46:b1:bf:97:b0:f4:48:a3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 11 02:00:51 2025 GMT
            Not After : Dec 16 23:59:59 2025 GMT
        Subject: serialNumber=69452de1ba1a2476a88ee21b24005d59da2171ff46a6bec5d5120c3d3266a9e8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:54:95:55:76:f2:29:96:d4:03:7c:6d:53:
                    72:2d:a3:f4:01:d9:89:4e:6b:ce:e1:e8:ac:a0:af:
                    0a:9c:06:83:8a:55:88:ff:7c:d1:e8:69:22:11:f7:
                    10:dd:c9:f5:d6:13:a5:8d:9c:e3:3a:01:83:da:9b:
                    b1:1b:67:54:e2:2b:03:ba:04:c7:4f:78:f6:9a:9a:
                    22:b4:7f:0c:48:80:0f:d6:3c:c1:6f:ce:68:88:60:
                    9b:1d:e4:2e:37:ea:05:f5:e9:da:dd:9f:49:e5:0a:
                    9d:8e:78:22:9c:d7:ee:07:75:9c:1e:69:d0:17:5b:
                    fc:a2:e8:2b:7b:b1:cd:c2:24:87:55:8d:5e:d0:28:
                    f6:4a:e0:08:7b:1e:21:8f:34:89:33:bd:d7:62:57:
                    31:6c:91:33:17:7c:01:45:1d:5d:54:6e:17:78:8f:
                    94:19:f2:b2:5c:af:81:aa:21:0e:3a:a7:02:dd:78:
                    30:4d:f2:02:9b:1f:6b:ba:82:50:80:27:09:75:f9:
                    cc:4a:92:74:4b:78:df:2b:57:63:88:73:9b:d3:7a:
                    56:09:4b:71:5c:ff:42:d8:9d:23:d6:f3:5a:79:9a:
                    a0:dd:99:58:03:47:63:a8:ba:81:30:de:8a:22:bb:
                    49:28:f6:8b:92:84:f5:e9:03:28:78:45:c0:45:2a:
                    61:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E4:38:B2:8C:F0:4A:7E:A8:04:43:93:78:F4:05:3F:6D:C2:FE:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d44f1594-4df6-4ab4-ab16-494a8e9f5f41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:81a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:da:af:cf:ea:3e:d4:41:36:77:15:26:99:a3:d5:13:62:56:
         6b:94:d1:f6:97:f3:6b:61:6b:85:ab:4a:17:55:34:00:ca:4f:
         b4:e1:08:dc:4e:a3:68:ff:ad:4d:ee:4f:e0:9d:f4:68:f8:11:
         b9:51:cd:1d:36:72:77:cb:b1:89:9f:f5:a2:42:22:18:ab:fb:
         8f:af:d1:57:67:87:12:87:33:11:09:60:a7:43:05:4a:ce:44:
         b7:1a:9a:ab:55:9b:46:7b:54:25:c5:88:51:51:86:13:ae:7d:
         32:71:ce:de:a1:a2:c1:37:cf:bd:54:86:57:63:fc:f8:24:42:
         7f:12:b5:8a:ed:98:dc:cd:c8:a3:fa:15:7c:af:ee:2d:5f:b5:
         55:d1:b7:a5:8f:73:68:76:c0:62:86:65:51:68:7a:df:d7:6c:
         9d:84:49:c8:4f:6a:6c:c9:30:94:1b:c8:36:e9:29:d8:c9:56:
         15:68:1a:fd:6c:84:b6:52:13:37:b6:46:98:5c:6b:56:8e:60:
         3f:20:b5:aa:5b:57:eb:75:a4:6d:4f:0b:89:42:72:bd:20:42:
         bb:79:b7:78:36:f1:0d:f5:4c:58:49:08:1e:f4:d2:af:a6:e3:
         0d:07:9c:d3:ea:77:04:73:b6:f5:67:19:09:31:de:7c:d9:a2:
         3c:0d:38:9e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUIAOXqYzSuRJD1QJGsb+XsPRIo8gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTExMDIwMDUxWhcNMjUxMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OTQ1MmRlMWJhMWEyNDc2YTg4ZWUyMWIyNDAwNWQ1OWRh
MjE3MWZmNDZhNmJlYzVkNTEyMGMzZDMyNjZhOWU4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvs1SVVXbyKZbUA3xtU3Ito/QB2YlOa87h6KygrwqcBoOK
VYj/fNHoaSIR9xDdyfXWE6WNnOM6AYPam7EbZ1TiKwO6BMdPePaamiK0fwxIgA/W
PMFvzmiIYJsd5C436gX16drdn0nlCp2OeCKc1+4HdZweadAXW/yi6Ct7sc3CJIdV
jV7QKPZK4Ah7HiGPNIkzvddiVzFskTMXfAFFHV1Ubhd4j5QZ8rJcr4GqIQ46pwLd
eDBN8gKbH2u6glCAJwl1+cxKknRLeN8rV2OIc5vTelYJS3Fc/0LYnSPW81p5mqDd
mVgDR2OouoEw3ooiu0ko9ouShPXpAyh4RcBFKmGrAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUheQ4sozwSn6oBEOTePQFP23C/scwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q0NGYxNTk0LTRkZjYtNGFiNC1hYjE2LTQ5NGE4ZTlmNWY0MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB//gaAwDQYJKoZIhvcNAQELBQADggEBADvar8/qPtRBNncVJpmj1RNi
VmuU0faX82tha4WrShdVNADKT7ThCNxOo2j/rU3uT+Cd9Gj4EblRzR02cnfLsYmf
9aJCIhir+4+v0VdnhxKHMxEJYKdDBUrORLcamqtVm0Z7VCXFiFFRhhOufTJxzt6h
osE3z71Uhldj/PgkQn8StYrtmNzNyKP6FXyv7i1ftVXRt6WPc2h2wGKGZVFoet/X
bJ2ESchPamzJMJQbyDbpKdjJVhVoGv1shLZSEze2Rphca1aOYD8gtapbV+t1pG1P
C4lCcr0gQrt5t3g28Q31TFhJCB700q+m4w0HnNPqdwRztvVnGQkx3nzZojwNOJ4=
-----END CERTIFICATE-----