This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bcf8c1-1808-4af1-a24f-c454507c7541.roa
File:                     f2bcf8c1-1808-4af1-a24f-c454507c7541.roa (raw, json)
Hash identifier:          h1vImBnVgzOquWS6R0HQIjfWx+Me72rz0ojqq5jBt6E=
Subject key identifier:   4E:30:B3:9A:A5:A3:5B:15:E9:69:EF:0B:32:34:0C:C2:32:27:1A:E3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       42FB9D3823961BA792858B69B43AB2E976048FAE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bcf8c1-1808-4af1-a24f-c454507c7541.roa
Signing time:             Thu 13 Nov 2025 00:10:41 +0000
ROA not before:           Thu 13 Nov 2025 00:10:41 +0000
ROA not after:            Thu 18 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        16.182.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:fb:9d:38:23:96:1b:a7:92:85:8b:69:b4:3a:b2:e9:76:04:8f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 13 00:10:41 2025 GMT
            Not After : Dec 18 23:59:59 2025 GMT
        Subject: serialNumber=32506b6a031f068801301f1d72402cc9c0b6416524740bf1b3fefd9e944153e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b1:57:4a:da:e8:ca:b3:68:f1:ab:90:2a:a1:
                    5c:2b:46:b2:f3:16:3a:b1:74:4c:d5:28:60:fb:99:
                    a6:6a:e0:e5:dc:27:2e:1c:04:88:7e:fe:01:12:cb:
                    e7:e3:54:b8:61:bb:28:d4:d5:66:d5:d2:55:e1:34:
                    89:75:9e:b0:78:24:aa:30:f9:f9:2b:e8:57:12:ed:
                    76:f1:24:0b:bd:73:22:bc:89:13:05:bc:bb:ce:49:
                    07:63:c1:19:97:05:f1:68:0a:a6:7f:58:20:03:98:
                    02:da:6c:08:ea:e7:e1:ce:4e:05:ec:ac:f5:f8:aa:
                    a8:35:b8:aa:08:1d:93:64:44:9a:d3:f4:1f:44:88:
                    fe:27:45:7f:6e:e8:da:99:2c:8a:8c:59:6a:75:88:
                    d1:e9:25:62:c3:31:43:82:37:da:1d:5b:af:b9:7d:
                    d1:9c:1c:38:c4:a5:e2:95:56:f1:ce:ea:28:46:8a:
                    27:a0:b6:a3:66:19:cc:1f:1c:0c:c8:00:1a:49:17:
                    65:fc:71:df:33:51:3d:a4:ed:c9:f2:0e:a1:36:33:
                    ab:a3:f1:af:e6:5a:f6:71:91:7d:26:48:b8:e3:fc:
                    90:08:ca:34:6b:3a:5d:a9:05:e6:e8:b8:4e:73:48:
                    1b:d4:53:3d:62:11:7c:eb:d1:04:69:49:9f:db:b8:
                    0b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:30:B3:9A:A5:A3:5B:15:E9:69:EF:0B:32:34:0C:C2:32:27:1A:E3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2bcf8c1-1808-4af1-a24f-c454507c7541.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         05:3b:2f:eb:f5:36:77:58:d8:67:18:41:4a:44:1d:24:5b:45:
         96:56:ae:c4:5a:0c:b6:46:08:a8:45:22:e6:b6:bf:cd:94:25:
         00:1b:ca:6f:1e:bc:08:29:c1:85:da:76:94:4f:10:9e:b5:0e:
         52:e9:7e:09:64:c1:a4:5f:34:75:3a:cb:72:66:eb:74:e7:7e:
         11:f0:80:4f:63:f0:7a:ec:7b:3a:c9:d3:f2:30:21:c4:c5:5f:
         f4:34:d6:ee:8a:22:67:f9:d4:e5:fd:c6:a0:55:e1:14:86:fa:
         7c:3e:85:2f:29:d9:05:1c:a7:d0:fe:f2:1a:0b:56:12:65:7a:
         04:1e:a7:44:27:bf:4e:e5:b2:3f:bb:33:06:28:26:bc:3f:8d:
         e7:6d:f6:56:2b:2d:14:ec:9d:d8:e4:ef:4e:06:bc:03:7d:60:
         c4:4f:0a:4a:eb:b0:cc:9d:0f:94:4e:b1:c2:0a:8e:1d:b6:97:
         54:23:83:f9:01:70:8f:f4:de:d1:bc:2a:81:43:d6:0b:68:eb:
         4b:d6:2c:33:82:85:8c:77:d8:03:27:65:f6:bc:9c:b9:f5:9e:
         c8:ae:a8:c2:15:40:6b:c0:3b:ec:71:8c:83:4d:2b:17:3b:63:
         88:e1:5b:a3:f5:f5:1b:fd:36:7c:a4:7f:e7:23:48:b5:b6:69:
         a9:a7:7c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----