This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f962418c-9cd6-4d29-bc13-088cd1d70e66.roa
File:                     f962418c-9cd6-4d29-bc13-088cd1d70e66.roa (raw, json)
Hash identifier:          h2j5lI5F/6IRNUSe+pOzGbvc8CD/ZU1LSLF458ewqts=
Subject key identifier:   22:04:6D:E7:B4:26:06:BD:33:2C:BC:2E:2B:99:D2:0B:85:E1:4F:7E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       25B8896C591BDA1B1749EE8760FE89BC1B599767
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f962418c-9cd6-4d29-bc13-088cd1d70e66.roa
Signing time:             Thu 20 Nov 2025 00:50:06 +0000
ROA not before:           Thu 20 Nov 2025 00:50:06 +0000
ROA not after:            Wed 18 Feb 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        16.93.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b8:89:6c:59:1b:da:1b:17:49:ee:87:60:fe:89:bc:1b:59:97:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Nov 20 00:50:06 2025 GMT
            Not After : Feb 18 23:59:59 2026 GMT
        Subject: serialNumber=5ad1a0712243d0efb35a7b9f3fb04b80caff6ee5214b469aaf6bb366ecdd55f3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3f:53:75:c1:a4:08:b7:e4:4a:64:8e:4b:87:
                    ac:00:13:79:59:9d:2f:68:2f:2c:c5:b6:83:07:c1:
                    58:b4:a8:5b:80:20:73:cc:45:58:b5:ea:e6:65:4f:
                    b2:33:be:c6:d4:5f:9a:ca:a8:74:35:9f:21:6c:29:
                    6a:20:09:7b:8f:a1:65:f6:98:ce:ce:26:75:db:19:
                    f5:6e:2b:45:e1:3c:95:71:ef:0b:e3:80:6e:4c:57:
                    6b:31:99:22:4b:2a:8f:9d:81:1a:02:b8:84:67:11:
                    f3:0b:86:b4:e1:ac:92:81:97:dd:a1:7f:fc:32:01:
                    f4:52:c2:d2:e9:57:0f:87:80:c0:df:2b:77:69:f8:
                    03:7f:d0:6d:d2:03:6b:a9:38:33:8b:6e:a0:c3:11:
                    d6:ef:67:9a:1b:b4:6d:83:7b:9c:e0:81:ca:4f:1c:
                    ca:a8:b9:f0:82:18:d0:2b:aa:c3:4a:e7:cd:a6:d0:
                    6a:de:bd:0d:9e:be:7b:6e:43:7b:11:45:c0:61:04:
                    a3:67:b7:d1:5f:81:a2:c2:a8:e4:8a:c6:a5:7a:0a:
                    e4:04:59:24:f0:ad:63:51:eb:93:e1:c2:ec:f0:fc:
                    33:2a:23:49:59:d7:a8:09:73:dd:0e:fe:49:4c:51:
                    02:89:19:e7:ed:aa:9a:80:19:ca:e6:4b:39:10:e8:
                    82:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:04:6D:E7:B4:26:06:BD:33:2C:BC:2E:2B:99:D2:0B:85:E1:4F:7E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f962418c-9cd6-4d29-bc13-088cd1d70e66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.93.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8b:a3:b8:7f:ea:3e:8d:a6:4b:d5:ea:63:d6:5d:1b:3a:7f:45:
         d3:fa:5f:4f:bb:f8:80:9b:a9:c9:ee:dd:3a:90:00:47:aa:53:
         67:5d:ed:c1:cf:d7:61:f0:f2:f9:10:5c:e9:95:93:89:21:93:
         5a:a8:ed:cd:8a:56:91:93:a0:9c:44:f6:7f:b5:a5:cf:7f:6d:
         ca:58:cf:2f:85:c5:ed:82:8d:f7:08:1e:7d:37:45:3e:b8:bd:
         70:94:e6:77:af:ae:7d:32:30:64:88:09:54:cf:c6:c6:64:c6:
         48:1c:1a:43:c0:34:c8:2d:da:71:50:e3:19:d4:56:56:7f:4b:
         99:a4:78:f6:2f:02:23:89:96:47:4f:b1:06:a8:49:49:14:e9:
         a4:83:bb:75:7c:64:22:41:13:77:00:13:f3:0e:f4:a8:0c:47:
         c7:38:e0:e9:2f:33:f8:4f:58:a6:ce:fe:26:43:3c:08:6e:54:
         ed:fa:00:18:79:6d:84:74:aa:b2:60:6e:23:6f:62:eb:f2:a3:
         7c:8e:69:0f:5c:b2:67:2f:5e:59:00:ce:db:07:10:97:ea:85:
         78:97:64:db:3c:fd:c3:d0:c8:e6:5d:61:56:85:92:95:05:46:
         1c:8e:87:8f:f5:2c:27:80:a2:34:22:a7:cc:e5:df:9e:77:b2:
         77:e5:4d:65
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJbiJbFkb2hsXSe6HYP6JvBtZl2cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTIwMDA1MDA2WhcNMjYwMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1YWQxYTA3MTIyNDNkMGVmYjM1YTdiOWYzZmIwNGI4MGNh
ZmY2ZWU1MjE0YjQ2OWFhZjZiYjM2NmVjZGQ1NWYzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBP1N1waQIt+RKZI5Lh6wAE3lZnS9oLyzFtoMHwVi0qFuA
IHPMRVi16uZlT7IzvsbUX5rKqHQ1nyFsKWogCXuPoWX2mM7OJnXbGfVuK0XhPJVx
7wvjgG5MV2sxmSJLKo+dgRoCuIRnEfMLhrThrJKBl92hf/wyAfRSwtLpVw+HgMDf
K3dp+AN/0G3SA2upODOLbqDDEdbvZ5obtG2De5zggcpPHMqoufCCGNArqsNK582m
0GrevQ2evntuQ3sRRcBhBKNnt9FfgaLCqOSKxqV6CuQEWSTwrWNR65Phwuzw/DMq
I0lZ16gJc90O/klMUQKJGeftqpqAGcrmSzkQ6ILXAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUIgRt57QmBr0zLLwuK5nSC4XhT34wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y5NjI0MThjLTljZDYtNGQyOS1iYzEzLTA4OGNkMWQ3MGU2Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQXTANBgkqhkiG9w0BAQsFAAOCAQEAi6O4f+o+jaZL1epj1l0bOn9F0/pf
T7v4gJupye7dOpAAR6pTZ13twc/XYfDy+RBc6ZWTiSGTWqjtzYpWkZOgnET2f7Wl
z39tyljPL4XF7YKN9wgefTdFPri9cJTmd6+ufTIwZIgJVM/GxmTGSBwaQ8A0yC3a
cVDjGdRWVn9LmaR49i8CI4mWR0+xBqhJSRTppIO7dXxkIkETdwAT8w70qAxHxzjg
6S8z+E9Yps7+JkM8CG5U7foAGHlthHSqsmBuI29i6/KjfI5pD1yyZy9eWQDO2wcQ
l+qFeJdk2zz9w9DI5l1hVoWSlQVGHI6Hj/UsJ4CiNCKnzOXfnneyd+VNZQ==
-----END CERTIFICATE-----
Generated at Thu Nov 20 11:04:13 2025 by rpki-client