This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5d5b33b-b2c8-4f44-b82b-7d4dca176348.roa
File:                     f5d5b33b-b2c8-4f44-b82b-7d4dca176348.roa (raw, json)
Hash identifier:          +sQtYFk9E44pUPzMFlS1bSZ1lSWTOU4eicbEXaC8w18=
Subject key identifier:   17:30:4A:41:A7:FA:7D:AE:60:77:99:64:7A:58:25:A4:22:24:D4:08
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       548931DCFCE39546D7C6D5756BA3DFC0700A9F2C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5d5b33b-b2c8-4f44-b82b-7d4dca176348.roa
Signing time:             Wed 12 Nov 2025 01:10:13 +0000
ROA not before:           Wed 12 Nov 2025 01:10:13 +0000
ROA not after:            Wed 17 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        54.25.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:89:31:dc:fc:e3:95:46:d7:c6:d5:75:6b:a3:df:c0:70:0a:9f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 12 01:10:13 2025 GMT
            Not After : Dec 17 23:59:59 2025 GMT
        Subject: serialNumber=aa74f0f7111e5802cef0717511a0ff9be507537b2f244258d3f66e7f0eea24c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3c:6a:24:48:9f:62:8c:2a:91:fa:f1:b3:4e:
                    f3:b8:46:60:cb:2e:e4:36:6e:8e:1c:b1:1b:4e:19:
                    c4:3d:33:1a:3c:2e:67:31:b4:dc:32:9a:79:20:b5:
                    82:e1:9d:c1:82:8f:fc:b1:93:08:12:d4:22:87:39:
                    94:92:02:6d:67:08:16:c9:e3:26:81:98:aa:31:7f:
                    f4:05:fb:3f:e0:07:24:38:71:0d:33:b6:2e:37:28:
                    91:92:a4:cc:d4:dc:51:ca:84:ab:53:e6:e4:ea:1e:
                    10:14:80:07:85:27:69:98:f8:a4:25:c7:4d:e7:f4:
                    2b:74:d4:d1:a4:13:48:73:c7:d3:c7:bf:fa:2f:4d:
                    6c:01:ad:58:b4:76:e9:9a:67:a0:69:2c:65:81:93:
                    8b:b2:2d:0a:d1:7b:46:35:3d:41:14:27:01:a7:72:
                    bb:ad:80:eb:22:23:7e:a7:99:4b:72:cf:35:3c:57:
                    6f:b7:96:6e:5d:74:94:f5:46:b2:29:78:99:15:e8:
                    b5:12:ee:d0:26:12:c0:ed:57:72:04:dd:fa:ea:b3:
                    30:dc:2d:0a:98:28:b3:1c:46:27:c6:19:83:0c:95:
                    6b:db:bd:0a:7d:b5:6d:2b:42:31:d7:03:9e:32:cb:
                    a2:28:40:62:cf:32:7f:46:91:ed:56:03:69:1a:93:
                    84:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:30:4A:41:A7:FA:7D:AE:60:77:99:64:7A:58:25:A4:22:24:D4:08
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5d5b33b-b2c8-4f44-b82b-7d4dca176348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.25.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:a0:b9:99:80:85:21:2a:a0:e3:4a:e0:0a:70:40:62:78:0f:
         d3:14:c3:09:3e:6a:7f:f0:1f:da:f8:a4:a3:c5:1c:2b:92:3e:
         fa:bc:3d:66:4a:2a:3a:51:76:89:a8:bc:16:85:c5:b9:57:82:
         ba:db:e3:9f:53:6e:10:94:4a:84:ba:4d:97:5a:01:6d:b8:24:
         ac:2e:21:fe:74:66:20:7c:ce:c2:7b:68:9a:20:10:fb:26:45:
         18:8a:35:27:3c:ac:99:c0:67:a6:4a:44:fe:cf:52:5c:ed:6b:
         5e:87:eb:dc:5d:5a:31:b7:93:e4:ca:3c:e0:88:9a:70:11:c6:
         3c:08:17:c3:ac:0e:41:b2:75:2c:13:8e:ff:66:bd:70:47:67:
         e5:2c:f8:b9:16:0c:b1:18:94:a2:a3:7d:85:f8:6a:41:71:bf:
         5a:df:4b:d7:23:fb:e0:5e:ab:cb:45:21:89:e5:50:85:b5:0d:
         a4:67:88:ef:95:8b:dd:dd:87:d5:34:8b:05:f0:dd:72:a2:da:
         f5:88:8b:9a:76:37:b8:3a:4a:78:66:1b:5b:d9:5e:02:21:04:
         f4:2a:be:7b:e5:cb:04:5a:6b:d0:95:8d:aa:61:a3:60:df:e7:
         80:cb:6e:ea:9e:c0:1e:3f:d1:cb:33:f6:6f:b8:77:e2:72:cd:
         f1:33:5c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----