This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d96ed13d-5494-4ab6-8dc1-4a7d190a2d14.roa
File:                     d96ed13d-5494-4ab6-8dc1-4a7d190a2d14.roa (raw, json)
Hash identifier:          l7O0tNSNUNzkpgzZl80spuwqoUHBpQYu1MqPy6/tFfk=
Subject key identifier:   87:A9:8B:8A:FA:A9:68:90:88:20:FC:1B:D5:FA:58:07:30:8A:26:62
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       176D58D57C18898BB036A3960F15BB1EB9FF586F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d96ed13d-5494-4ab6-8dc1-4a7d190a2d14.roa
Signing time:             Sat 22 Nov 2025 00:31:15 +0000
ROA not before:           Sat 22 Nov 2025 00:31:15 +0000
ROA not after:            Fri 20 Feb 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        32.192.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6d:58:d5:7c:18:89:8b:b0:36:a3:96:0f:15:bb:1e:b9:ff:58:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 22 00:31:15 2025 GMT
            Not After : Feb 20 23:59:59 2026 GMT
        Subject: serialNumber=3b739a0d24ac4b51cd11da068bd9cc19f5a03fc63c8b8e6209c77926b9365606, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:61:e4:fd:07:e7:8b:f4:80:b3:10:0e:e1:
                    e8:c1:57:02:13:83:30:78:a9:db:4d:aa:cb:aa:c4:
                    2f:7f:e0:53:24:3c:f0:df:ba:8a:d7:a1:c3:4f:6e:
                    af:d6:95:05:25:6d:44:1c:5b:ef:fe:f3:7a:b8:16:
                    43:f7:af:c9:71:d9:ea:23:e4:98:81:e6:53:2e:85:
                    33:18:1a:e4:32:a4:6b:70:2e:f0:aa:83:16:73:bf:
                    6e:fa:86:fa:24:86:be:ef:45:bc:b0:82:e8:15:05:
                    db:c5:86:b6:50:9a:43:0f:e4:30:84:2b:8f:85:83:
                    72:e6:5a:72:7d:8d:77:1b:14:7b:cf:ab:03:4f:4e:
                    89:02:4c:b5:de:bf:bb:4b:b0:0e:65:2d:9c:f0:2e:
                    a5:5a:35:a4:9f:ff:e2:54:c2:be:a7:f4:a5:78:74:
                    57:d5:3f:00:63:e8:e8:b9:ce:d7:a3:fd:45:92:5f:
                    ad:1c:33:00:d4:06:8a:19:6a:3b:c6:77:03:52:00:
                    c6:6d:fb:44:64:35:33:dd:08:91:ef:66:63:94:00:
                    15:74:4d:04:8e:e4:cb:0b:3f:b7:33:71:2d:5c:0a:
                    57:d9:44:35:7a:7f:22:3b:ab:b5:70:b8:f7:86:5c:
                    a0:9c:58:d4:7b:a9:22:2e:7b:0c:0f:36:b9:6d:29:
                    38:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A9:8B:8A:FA:A9:68:90:88:20:FC:1B:D5:FA:58:07:30:8A:26:62
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d96ed13d-5494-4ab6-8dc1-4a7d190a2d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  32.192.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         1a:0f:10:88:df:2f:fc:af:97:0f:24:b6:10:ee:95:f4:15:b4:
         1b:9e:e2:a2:64:58:61:9e:25:65:18:ff:99:f8:06:51:79:df:
         aa:0b:93:eb:fc:95:3e:b0:b1:1e:78:39:0e:30:af:d1:c1:b6:
         c6:f4:26:84:a5:ff:bb:ef:63:45:fa:b4:27:c8:5f:a8:ea:1b:
         7e:e2:35:c9:da:a5:7f:3a:4c:90:c5:75:6b:3f:f9:c7:91:62:
         de:b9:c1:f5:ee:ff:96:bd:cd:67:7a:8c:7f:95:3c:22:c3:f6:
         86:80:78:f0:65:5b:96:52:68:c0:31:a1:ad:d3:3c:44:4a:34:
         b2:4c:63:8f:1b:11:06:18:f7:0d:88:61:79:27:2d:90:75:93:
         c0:a1:7d:c8:a5:02:a2:8c:80:e4:03:d3:12:70:e1:75:f3:38:
         d8:b5:68:ff:37:84:bc:6d:c9:1c:e7:96:70:11:75:f5:e0:91:
         8d:a3:d2:5b:7e:b5:af:e8:77:31:e1:01:bc:4b:e6:2b:5e:26:
         1f:ab:7e:57:ee:73:0f:a4:72:4a:77:5c:d7:85:44:31:cb:62:
         c3:15:77:cc:51:ed:c5:e0:fe:da:9d:a5:62:8d:f4:4d:62:fb:
         74:c5:5c:e4:9d:e4:5d:a0:b1:7a:96:57:f6:49:41:2f:bc:17:
         1c:e0:72:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----