This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2a12573-e976-412c-9ab9-c7f02c2ce294.roa
File:                     f2a12573-e976-412c-9ab9-c7f02c2ce294.roa (raw, json)
Hash identifier:          Qeg1wp87LC7FRc2t78QApiFOMo1BTSBC29D5sPyGU8E=
Subject key identifier:   0B:9B:E5:AB:97:92:E1:D1:7B:C3:FD:32:96:03:54:00:9D:B3:FE:92
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       26E58AA33844709803D74D571963E1F1D0DC847D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2a12573-e976-412c-9ab9-c7f02c2ce294.roa
Signing time:             Wed 12 Nov 2025 00:31:08 +0000
ROA not before:           Wed 12 Nov 2025 00:31:08 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fb9:4000::/39 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e5:8a:a3:38:44:70:98:03:d7:4d:57:19:63:e1:f1:d0:dc:84:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 00:31:08 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=83774086b87fcacdfa5c04ac86325d76ba1a8131a3843e84ea666ae4d20dbe21, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:a5:a8:1d:4b:b4:0e:1f:52:a0:a8:e2:35:
                    ed:f6:00:91:d4:63:1f:33:11:cc:f5:19:b3:6d:0e:
                    e1:e4:5c:3d:fa:df:de:65:9d:bd:14:f9:61:2e:d0:
                    4a:a7:4d:0b:a3:55:73:35:68:2c:af:f4:92:b7:31:
                    f4:1a:9c:e3:f2:93:d5:69:28:03:f1:af:46:f7:24:
                    70:c8:00:2d:55:2b:63:dc:fa:2d:1d:8c:6c:7c:95:
                    0f:04:0f:26:39:07:58:f1:b0:69:f7:96:bb:66:6d:
                    2f:f0:96:01:65:fd:f6:62:aa:3b:1e:5b:b5:44:b0:
                    37:85:d8:1f:6c:e8:57:b4:dc:28:ff:b8:e5:2a:5f:
                    04:5a:53:d0:d6:09:2e:18:f8:0d:6b:86:92:ca:00:
                    e8:6e:15:f5:1a:0e:20:91:0c:11:90:2c:07:de:bc:
                    fd:35:17:20:8c:ea:47:88:53:08:b2:b0:3f:9f:ab:
                    4d:ae:6c:33:12:19:2c:24:87:0f:b8:7a:d2:07:63:
                    36:0c:b9:36:8d:50:81:31:34:30:35:95:23:7e:51:
                    aa:29:4c:50:77:ea:95:4a:42:f6:6f:9c:07:0c:de:
                    dd:5d:7c:ad:58:75:5d:ff:f2:0d:56:dc:f5:c7:78:
                    18:04:72:79:ad:6e:ac:b9:8d:38:05:e6:e7:8a:c3:
                    28:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9B:E5:AB:97:92:E1:D1:7B:C3:FD:32:96:03:54:00:9D:B3:FE:92
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2a12573-e976-412c-9ab9-c7f02c2ce294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fb9:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         d1:b0:ad:bb:79:7e:83:6d:ed:36:e7:02:cc:a1:0c:b0:e6:d2:
         0b:80:60:58:a2:48:45:68:87:12:8e:f4:4a:3b:b7:b5:56:69:
         3d:40:b6:33:3d:45:78:08:62:ef:64:d9:28:7a:6f:fb:0b:bd:
         c7:4e:c5:51:10:b2:d4:86:f2:8e:b5:2a:c2:86:d3:45:33:03:
         8a:45:ed:39:0b:ee:bf:80:0a:10:90:40:2c:e6:9c:d3:40:20:
         25:51:95:c0:d7:cc:7a:07:3d:e2:63:9b:cf:8b:43:dd:2b:30:
         18:d3:7b:76:de:8a:b3:4a:ac:d9:f6:ae:5b:0f:bf:96:59:5e:
         e1:5b:8d:72:f3:12:37:01:67:15:35:a6:32:8e:c6:5b:fd:3b:
         72:ed:81:a8:25:05:eb:b6:1d:2a:91:07:7b:03:f7:d0:20:e6:
         ff:e0:3a:cd:cd:56:04:3c:d4:10:94:b1:9d:ba:86:e7:f6:15:
         86:0b:be:8c:6f:a1:5f:da:7b:5d:55:15:f5:68:c0:39:d5:f7:
         d0:41:12:97:d7:2d:cb:80:25:dc:3a:12:a6:68:dd:c9:a9:9b:
         77:ca:c8:e6:34:ea:ca:f7:b7:c0:b6:88:f7:0f:e3:99:32:79:
         68:f5:08:0e:ad:01:17:e5:f6:ad:d3:b4:c4:46:f3:93:62:1a:
         b0:5c:a6:2b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----