This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f648d5db-f067-4e11-bd60-faef2d5a5e37.roa
File:                     f648d5db-f067-4e11-bd60-faef2d5a5e37.roa (raw, json)
Hash identifier:          oHfLcnSRIY+jG4rXXCgFaEiQEl1j962g4z2LXBVdo+0=
Subject key identifier:   FE:10:B7:35:FF:56:55:0F:B5:08:BE:10:60:30:17:24:A8:92:9A:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       418F4795515BC43F3F7B98473C65D1018089C2CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f648d5db-f067-4e11-bd60-faef2d5a5e37.roa
Signing time:             Mon 10 Nov 2025 00:00:11 +0000
ROA not before:           Mon 10 Nov 2025 00:00:11 +0000
ROA not after:            Mon 15 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        184.32.0.0/12 maxlen: 12
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8f:47:95:51:5b:c4:3f:3f:7b:98:47:3c:65:d1:01:80:89:c2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 10 00:00:11 2025 GMT
            Not After : Dec 15 23:59:59 2025 GMT
        Subject: serialNumber=2cd0f727bf480e60ca2a285912f8c63324d1dc63485892033bc5a5a43388c01c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:8d:8e:be:7e:99:7d:f0:ae:2a:d1:10:4d:
                    98:88:03:ea:c2:f1:45:39:17:a9:51:cb:f4:88:88:
                    c6:25:ef:2d:a5:3e:3a:7c:3c:1b:ef:53:5c:a2:30:
                    b0:6d:b0:e6:30:65:ad:f8:b4:e6:a8:83:c3:c9:dc:
                    81:e8:61:14:01:92:90:1e:63:d1:49:63:41:51:db:
                    8f:0b:07:ea:7b:ed:6f:10:c0:0f:ed:f2:10:6a:90:
                    6d:01:7f:92:25:29:4a:8a:36:1d:04:a0:af:3c:09:
                    b5:4b:5e:fc:a8:22:6b:aa:7f:e0:44:1a:3b:e9:0c:
                    5e:09:e8:21:fb:30:14:b0:0f:4c:75:e7:2d:5c:16:
                    dc:7f:68:66:ab:90:ce:81:85:49:77:02:93:e0:67:
                    ca:bd:6b:38:38:f9:45:22:88:8c:fc:6e:27:86:c2:
                    4d:4c:00:b4:0d:26:21:a4:6d:64:8f:ab:d9:07:b8:
                    d2:7c:e4:ea:9f:45:8d:d0:97:94:82:e6:16:c7:63:
                    c8:08:ad:38:87:43:37:f5:15:d3:d2:a7:7c:c7:6e:
                    7d:ad:e4:d2:2d:00:8c:6d:68:03:74:f6:81:fe:d7:
                    dd:cd:0c:85:a9:ff:fd:32:14:6d:41:b8:06:31:93:
                    57:cb:a0:e9:fc:30:9c:a5:91:a9:c6:c8:27:2a:63:
                    78:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:10:B7:35:FF:56:55:0F:B5:08:BE:10:60:30:17:24:A8:92:9A:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f648d5db-f067-4e11-bd60-faef2d5a5e37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.32.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         34:98:3b:e1:cc:f9:8e:4c:a2:03:ef:d9:05:ac:88:32:0b:50:
         08:0a:10:26:53:19:2d:64:d8:a9:22:c9:3f:60:f3:38:87:8c:
         af:23:73:2f:e7:66:39:ae:17:0e:18:75:71:7c:00:f6:f9:ef:
         30:ab:e8:18:b5:f2:44:3b:c1:e3:ef:6a:8e:3a:f2:44:ce:17:
         fe:46:51:b9:b0:23:13:db:f4:5b:5d:9c:7e:67:7a:8f:33:3a:
         b8:b3:fc:34:f0:06:04:6d:34:85:2c:5e:ec:50:fc:08:d1:18:
         61:fd:2a:f3:fc:b8:13:77:f4:db:25:6a:8c:a9:5b:37:d0:ba:
         f6:0d:cf:28:73:ec:25:c6:98:3c:5e:c5:1d:bb:56:ef:7a:cb:
         e0:ee:48:2c:4a:d7:ae:96:87:df:88:c1:91:b7:85:7b:f8:79:
         0e:b5:7b:d0:23:c4:32:f4:a0:02:6c:9d:2f:25:5d:ad:02:6a:
         85:9a:7f:65:fa:45:9a:7b:de:7a:88:92:0f:66:1f:f1:81:ae:
         16:c5:01:da:11:fc:ec:e9:c2:73:e6:d0:b0:f7:e7:9d:42:fd:
         e8:56:d5:fc:0f:14:2f:dd:fa:34:95:0c:2b:c4:9a:13:ec:64:
         ea:5e:e2:19:17:b0:30:26:5b:41:4f:19:0a:ad:cc:f5:32:64:
         ce:65:b7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----