This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d947157d-70fb-4555-9dd2-32db83e4633c.roa
File:                     d947157d-70fb-4555-9dd2-32db83e4633c.roa (raw, json)
Hash identifier:          kySxGolynubmAWmRjZpXxnf9lmX3pfNnGwrcOmLPeTk=
Subject key identifier:   77:99:C6:D1:88:3E:C1:C6:84:3A:2C:C2:E9:87:4A:FB:A8:FC:76:50
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5687BB92DE7BD2F591200C44F8F57F0C15EEF09E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d947157d-70fb-4555-9dd2-32db83e4633c.roa
Signing time:             Sat 22 Nov 2025 00:10:59 +0000
ROA not before:           Sat 22 Nov 2025 00:10:59 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        63.246.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:87:bb:92:de:7b:d2:f5:91:20:0c:44:f8:f5:7f:0c:15:ee:f0:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:10:59 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=65fd0ffd7c0b3fcac2482efdf268672253bc50156819005bece50871650e54be, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:58:86:d6:01:f9:87:bb:ba:b6:8e:1d:48:
                    53:90:aa:52:36:a1:7f:91:ab:2f:61:c5:9e:09:ad:
                    64:86:4b:87:f8:cf:7d:5e:ad:6a:1f:40:dc:0b:04:
                    f4:c4:c5:e2:52:25:42:87:40:15:2f:f5:3e:c2:66:
                    da:c4:3b:26:f3:cf:91:69:4c:59:51:ad:ae:b9:1b:
                    a3:0c:80:09:59:e8:c1:41:c1:ee:bf:c3:d6:41:ce:
                    eb:8b:be:7a:7c:ff:67:66:21:35:2e:77:a7:ae:78:
                    0c:0f:18:99:1e:90:98:d5:5f:61:e6:69:2b:45:42:
                    8a:79:e7:1b:ce:ea:5f:27:5c:f1:f8:73:88:3b:f1:
                    1b:a2:a3:4d:15:a2:5c:47:b8:16:ae:d8:9f:9f:d0:
                    34:da:f6:79:c0:7d:be:10:72:95:c4:6b:13:78:35:
                    5b:82:a5:bf:75:91:1b:a2:1c:b7:06:e1:37:9d:d9:
                    c4:30:59:39:fe:b3:37:80:94:e2:9e:72:81:ad:c2:
                    7d:f6:00:ac:a4:74:73:a3:6d:2b:f6:79:2b:59:46:
                    b9:35:e0:26:27:86:12:78:a1:ae:6b:6c:e4:1d:f4:
                    86:9e:2e:30:e8:31:ef:37:c9:c5:c0:26:93:43:15:
                    e8:94:c0:df:44:fa:26:00:bb:48:39:f6:9e:f4:97:
                    0f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:99:C6:D1:88:3E:C1:C6:84:3A:2C:C2:E9:87:4A:FB:A8:FC:76:50
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d947157d-70fb-4555-9dd2-32db83e4633c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d1:2f:6c:4f:6d:41:f3:66:fc:04:4b:ba:cb:aa:7b:9f:13:
         c5:5a:0a:42:7b:75:30:8f:ca:4e:98:f2:53:fb:00:b0:19:31:
         10:ea:d4:40:99:f5:73:4b:c8:c0:31:f1:4c:0a:5e:bf:58:4e:
         69:a7:c6:50:ba:7d:5d:a4:35:3d:01:01:78:bc:fa:65:55:b3:
         74:aa:f4:ff:e9:2c:cd:60:da:27:57:c6:8f:1c:b8:56:16:57:
         a2:ed:d8:7a:ac:e0:61:81:62:3c:f0:eb:dd:71:2a:c6:18:07:
         75:5f:f6:a8:7e:ca:7c:60:9f:e3:9f:93:68:a5:9c:5e:7e:ed:
         59:0f:1d:04:34:c2:89:68:8c:e2:b0:13:10:c6:c6:9f:23:e2:
         05:0d:fe:bc:32:53:0c:24:05:80:eb:86:83:ab:71:99:e9:b3:
         32:3d:fb:ea:1d:01:c4:5c:bb:cb:ec:97:51:90:9a:13:56:e7:
         ff:97:e7:f3:63:8b:8c:ff:95:ca:9e:45:60:13:af:cd:2d:d5:
         3b:5c:e3:17:7f:42:e6:22:ae:5a:a0:64:72:f5:c5:cb:a9:02:
         f8:5a:43:32:b2:f3:cb:ef:50:23:80:63:ef:b1:e2:01:ef:89:
         a4:07:54:e6:2a:c7:b9:30:ae:e7:41:25:59:a4:1a:12:c6:a5:
         ad:97:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:37:56 2025 by rpki-client