This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb2a41c7-41cd-4f96-89c0-a4b23e2dc22a.roa
File:                     eb2a41c7-41cd-4f96-89c0-a4b23e2dc22a.roa (raw, json)
Hash identifier:          x1GTDhZmfdsmKHu8Uk4evXXKrz6uZaER1Vl96iO08Dw=
Subject key identifier:   E5:0E:14:2C:05:2C:0C:1B:29:92:88:51:14:0E:FB:3F:11:72:6E:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0A64565A8CB1A9C02864B300FC8F59BCD1F08330
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb2a41c7-41cd-4f96-89c0-a4b23e2dc22a.roa
Signing time:             Sun 16 Nov 2025 00:21:12 +0000
ROA not before:           Sun 16 Nov 2025 00:21:12 +0000
ROA not after:            Sun 21 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.54.59.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:64:56:5a:8c:b1:a9:c0:28:64:b3:00:fc:8f:59:bc:d1:f0:83:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 16 00:21:12 2025 GMT
            Not After : Dec 21 23:59:59 2025 GMT
        Subject: serialNumber=7579b2134410adee2c298d24e96e85b22adee432026f2cf3645616f6a8abfb81, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:bf:58:76:2d:3c:2e:37:8f:42:31:e1:b8:
                    35:34:cf:1b:68:87:f5:1a:77:39:20:a2:c4:31:b9:
                    e4:95:32:a3:1d:a8:68:bf:fb:1c:69:d0:9a:e4:d1:
                    57:be:02:ff:f5:ab:53:10:eb:a8:7f:ca:cc:d9:78:
                    5f:f9:79:45:bd:5d:79:5c:5a:2a:7d:d6:d0:8a:12:
                    2c:d1:03:c8:1c:9d:26:75:b2:ce:b7:6f:e2:c5:17:
                    58:cf:1b:ea:ca:7d:50:50:0c:ac:15:f9:ad:e7:a5:
                    22:0f:b1:e9:47:37:25:bd:0d:b6:35:e1:c3:ed:61:
                    db:c7:18:cd:f4:a1:7c:44:e8:6f:1c:f3:d4:71:2e:
                    27:27:8e:1b:01:15:7b:65:40:71:1f:69:f5:83:cc:
                    37:1f:42:b8:97:33:ed:c1:fa:16:48:cc:73:de:99:
                    26:bb:de:42:40:a1:6c:9d:83:c0:3c:1f:5a:77:89:
                    57:0c:83:b4:00:e2:ac:3c:42:ea:f4:e6:16:81:62:
                    f0:f1:01:b8:b6:93:64:d1:79:ce:70:a7:5e:6f:7d:
                    fc:dc:b7:86:bd:5d:14:b7:04:92:ae:d8:e4:bb:28:
                    f8:fa:01:94:6c:6f:04:0a:c6:b4:e8:dd:9e:90:90:
                    52:ba:47:cd:40:01:71:f3:d2:e9:c3:92:3a:0b:04:
                    f8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0E:14:2C:05:2C:0C:1B:29:92:88:51:14:0E:FB:3F:11:72:6E:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb2a41c7-41cd-4f96-89c0-a4b23e2dc22a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:75:0a:ba:07:be:de:c9:7a:2d:41:8b:99:1b:0a:93:6d:eb:
         1d:62:d7:53:6e:03:fc:d7:1a:69:84:d1:88:58:d2:91:32:d6:
         38:04:1e:23:69:e5:5f:7b:96:1b:17:35:b3:0c:89:d5:a1:58:
         9a:4f:ea:a8:bb:05:6c:50:d9:e2:06:94:3b:13:fd:af:83:e4:
         2a:3a:dc:aa:bb:30:e1:81:85:51:06:bb:01:f2:b4:5f:44:d9:
         a7:16:87:75:9b:d9:d8:7a:3c:ab:c8:54:ce:1b:7d:9e:8a:4a:
         c7:ee:47:14:e3:10:2f:5c:85:12:10:f8:00:16:64:71:a9:65:
         40:0d:5a:09:12:d1:37:bc:e5:8f:14:82:1f:ba:a9:ce:74:30:
         77:0f:35:1c:9f:92:e5:89:06:b6:75:03:d6:d3:69:e1:c6:28:
         00:74:33:92:10:de:64:b2:76:cd:61:db:80:a0:5a:3e:54:aa:
         63:78:3e:6a:01:1a:12:41:f4:7b:b8:9a:69:1d:b3:75:2e:41:
         e1:5b:02:50:9f:d1:e9:40:b2:eb:91:bc:21:df:20:34:dd:e2:
         40:d2:cb:c7:92:ef:c0:62:3b:40:e5:2c:42:f0:02:b7:97:d8:
         cf:37:e8:d6:22:27:2b:e7:ae:d6:c3:19:ce:bf:e0:8d:85:fa:
         51:d4:af:43
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCmRWWoyxqcAoZLMA/I9ZvNHwgzAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTE2MDAyMTEyWhcNMjUxMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NTc5YjIxMzQ0MTBhZGVlMmMyOThkMjRlOTZlODViMjJh
ZGVlNDMyMDI2ZjJjZjM2NDU2MTZmNmE4YWJmYjgxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZD79Ydi08LjePQjHhuDU0zxtoh/UadzkgosQxueSVMqMd
qGi/+xxp0Jrk0Ve+Av/1q1MQ66h/yszZeF/5eUW9XXlcWip91tCKEizRA8gcnSZ1
ss63b+LFF1jPG+rKfVBQDKwV+a3npSIPselHNyW9DbY14cPtYdvHGM30oXxE6G8c
89RxLicnjhsBFXtlQHEfafWDzDcfQriXM+3B+hZIzHPemSa73kJAoWydg8A8H1p3
iVcMg7QA4qw8Qur05haBYvDxAbi2k2TRec5wp15vffzct4a9XRS3BJKu2OS7KPj6
AZRsbwQKxrTo3Z6QkFK6R81AAXHz0unDkjoLBPgfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5Q4ULAUsDBspkohRFA77PxFybhkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ViMmE0MWM3LTQxY2QtNGY5Ni04OWMwLWE0YjIzZTJkYzIyYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjNjswDQYJKoZIhvcNAQELBQADggEBAKN1CroHvt7Jei1Bi5kbCpNt6x1i
11NuA/zXGmmE0YhY0pEy1jgEHiNp5V97lhsXNbMMidWhWJpP6qi7BWxQ2eIGlDsT
/a+D5Co63Kq7MOGBhVEGuwHytF9E2acWh3Wb2dh6PKvIVM4bfZ6KSsfuRxTjEC9c
hRIQ+AAWZHGpZUANWgkS0Te85Y8Ugh+6qc50MHcPNRyfkuWJBrZ1A9bTaeHGKAB0
M5IQ3mSyds1h24CgWj5UqmN4PmoBGhJB9Hu4mmkds3UuQeFbAlCf0elAsuuRvCHf
IDTd4kDSy8eS78BiO0DlLELwAreX2M836NYiJyvnrtbDGc6/4I2F+lHUr0M=
-----END CERTIFICATE-----