This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ffcfb4-93c2-49ca-8723-e0124cd03717.roa
File:                     f6ffcfb4-93c2-49ca-8723-e0124cd03717.roa (raw, json)
Hash identifier:          VK3RIwZIJg7ZfsZM97diNXZewY7IdoQXWewbcoi66zs=
Subject key identifier:   14:84:73:9C:E0:8F:A9:5B:8C:BC:78:0A:5B:13:58:05:CC:AE:8E:BA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       413644873B2DACC7E8ED8723B53A7B5EDCDF90A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ffcfb4-93c2-49ca-8723-e0124cd03717.roa
Signing time:             Thu 20 Nov 2025 00:10:07 +0000
ROA not before:           Thu 20 Nov 2025 00:10:07 +0000
ROA not after:            Wed 18 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        56.242.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:36:44:87:3b:2d:ac:c7:e8:ed:87:23:b5:3a:7b:5e:dc:df:90:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 20 00:10:07 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: serialNumber=10b90167132d64ebc7df3698f776110e784985f8004f33bceb6fab525895cc7e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:17:92:19:a4:06:f7:c5:1c:c8:70:aa:8c:
                    cd:e8:cf:b2:67:6c:9b:4a:95:9c:4a:9a:a3:57:74:
                    f7:82:cd:99:96:4c:00:6d:59:f5:1f:19:8d:a9:ce:
                    cd:80:87:4e:38:87:78:80:f6:a2:5b:a2:ba:6f:13:
                    20:73:f6:68:f2:4f:a4:e2:fa:58:dd:a0:42:92:6c:
                    68:2e:76:da:46:a4:d4:42:53:2d:86:54:0a:c3:0a:
                    2f:ff:9d:f9:ba:f6:39:cc:eb:77:0e:ba:6d:ea:ec:
                    8c:8a:de:9c:b6:04:39:24:ea:d1:cf:36:31:b1:f0:
                    28:d2:8c:87:f8:b0:5b:dc:56:52:bb:c4:e8:1f:6f:
                    ca:b7:e1:d7:2c:b0:dd:72:7e:4d:20:0b:c0:c6:9f:
                    17:40:1f:ee:ee:62:12:e5:4a:19:70:e6:e0:4d:70:
                    b2:df:11:32:d4:8f:99:b1:33:40:cb:0c:fe:8b:dd:
                    7b:84:10:73:1b:17:8c:58:01:94:e7:ad:c7:d7:d7:
                    52:dd:61:1a:b2:ff:98:99:25:04:f9:e8:54:ae:b4:
                    91:af:87:74:49:7c:21:bb:6d:66:e9:85:b7:5a:37:
                    0c:f4:ad:94:9b:ce:2a:ff:82:79:28:4b:b4:e5:a2:
                    57:89:c6:bf:6f:64:09:b8:aa:6e:8f:e8:0b:bb:f1:
                    3e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:84:73:9C:E0:8F:A9:5B:8C:BC:78:0A:5B:13:58:05:CC:AE:8E:BA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6ffcfb4-93c2-49ca-8723-e0124cd03717.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a8:84:24:0a:5d:df:17:95:78:bf:c4:f5:ef:5f:bb:18:b6:a4:
         81:cc:83:c5:4f:60:21:c0:99:35:5c:38:2f:b8:88:ad:6f:52:
         31:08:5c:ab:b2:4c:c1:7b:22:f9:de:51:c0:75:ef:b1:a0:a6:
         9c:8b:d6:a8:a1:0d:ee:7d:61:51:8e:6a:01:8d:bd:6b:c1:4e:
         bd:62:9f:4e:a9:3e:4f:41:ce:9f:a1:5a:5c:8e:99:4c:e5:d3:
         02:4c:f8:b5:ad:01:c8:db:72:28:04:4c:71:b6:40:01:62:f8:
         2e:8f:f5:b6:80:1d:a1:c6:56:93:17:12:b7:1c:6e:7f:d1:b0:
         1e:db:08:75:1d:f2:ec:40:c8:fd:6b:2c:cb:17:21:b1:32:c0:
         80:31:47:57:0c:13:8d:81:a8:ed:f0:d7:1e:b5:86:b3:b5:3d:
         94:06:19:2f:6b:e3:67:8e:58:a2:ca:bf:e0:ec:3a:86:96:dc:
         3b:2f:98:d0:d8:ba:c6:6e:31:90:32:ba:f9:44:8b:4e:ba:5a:
         08:7a:6c:a7:f1:a7:95:69:91:57:f3:14:5c:7b:12:03:02:ea:
         3b:48:d1:20:33:55:ae:f0:cf:c9:b5:3d:1e:05:c2:2b:aa:28:
         f5:eb:cf:b5:73:ee:36:1e:a8:2f:33:ee:f3:08:2d:e1:54:a8:
         14:23:5c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----