This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11f77e23-07c2-4904-8bd9-b1d1f648534b.roa
File:                     11f77e23-07c2-4904-8bd9-b1d1f648534b.roa (raw, json)
Hash identifier:          Q4hdpFvbTZNUMRTCMqnvrlI4fwYlpFz7qKJVAAPzGEg=
Subject key identifier:   4A:DB:18:E0:2A:7F:58:F7:5A:91:4F:0D:FD:F1:55:FB:B7:D2:72:19
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       56B80EE85321C24C22129F5A7588454907F89064
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11f77e23-07c2-4904-8bd9-b1d1f648534b.roa
Signing time:             Wed 19 Jun 2024 00:00:00 +0000
ROA not before:           Wed 19 Jun 2024 00:00:00 +0000
ROA not after:            Wed 24 Jul 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b8:0e:e8:53:21:c2:4c:22:12:9f:5a:75:88:45:49:07:f8:90:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 19 00:00:00 2024 GMT
            Not After : Jul 24 23:59:59 2024 GMT
        Subject: serialNumber=cfbac4cfb38115fe0bae296db2ff4aa2ec5e6d21cccdcc22dc316ea6fe365f42, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:32:fd:6a:3b:5f:32:e8:24:9f:21:5f:b3:
                    f9:09:be:48:75:da:b4:85:a8:8b:60:a3:45:42:43:
                    28:2c:0d:19:41:7d:6f:6d:2b:5b:62:c3:b6:51:57:
                    95:70:d7:5a:5a:04:7f:db:75:ed:f3:6c:b7:61:bd:
                    8c:dc:68:73:ad:91:12:82:5e:87:3e:d4:d9:fa:8c:
                    8b:0a:cf:2c:4b:b4:39:5d:16:c2:ae:e0:ed:24:e0:
                    43:3c:a2:5d:ad:c0:5a:c0:86:d2:7a:32:1f:fb:62:
                    72:e6:c6:94:02:94:64:a5:bf:f1:ef:49:de:1f:03:
                    c2:8b:74:81:99:3a:52:39:da:0d:a4:9c:2e:42:73:
                    1f:85:6c:38:f9:47:4e:6d:d3:02:7d:61:4c:1d:dc:
                    da:17:e5:01:41:b3:86:0e:7a:34:9b:fe:83:af:28:
                    6e:14:6f:f2:1f:7b:9d:a7:25:29:8f:cf:ec:bd:52:
                    71:0e:f3:9e:32:36:b2:d0:8f:76:e6:9f:7d:92:a0:
                    13:26:81:c0:23:94:90:b3:61:e7:26:04:1a:c9:53:
                    60:90:2b:65:3c:94:9e:a5:20:a6:85:be:e8:50:14:
                    3b:da:c5:c1:a9:ae:cb:c8:5c:80:a1:82:60:2e:a7:
                    41:1e:31:a3:6c:ad:de:ce:dd:03:5b:75:11:f0:47:
                    fe:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DB:18:E0:2A:7F:58:F7:5A:91:4F:0D:FD:F1:55:FB:B7:D2:72:19
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/11f77e23-07c2-4904-8bd9-b1d1f648534b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:09:0b:00:27:88:5b:ba:28:d5:5d:99:da:f9:bd:00:3c:e9:
         52:4c:7f:07:b5:03:54:e8:8c:d8:14:d7:42:91:9c:e9:49:26:
         d4:d5:f2:42:87:cc:b9:ed:54:5c:fb:b4:66:88:e6:61:83:d2:
         d2:a3:e0:c7:88:06:e3:a2:94:e0:5d:36:10:68:2c:99:08:0c:
         bb:cf:f7:0f:65:2e:f0:1d:d8:ad:d7:20:e5:70:6a:24:e0:77:
         e0:33:50:6a:8e:af:f3:92:7a:42:68:6a:4d:ea:c7:9f:87:48:
         9d:82:50:eb:62:3e:20:39:48:bd:58:75:ad:17:54:28:f2:66:
         61:e7:ac:f7:49:52:b0:fa:e5:66:62:03:e0:a3:88:ba:5a:bf:
         ab:6e:ee:3e:ca:de:ca:76:1b:5f:3f:a1:5a:4d:ea:02:c3:94:
         e6:a4:00:87:1e:2f:05:04:cf:c1:4c:be:bb:1a:ea:9e:91:5e:
         59:07:ea:0a:ce:25:80:5b:4d:ab:68:96:bc:f0:07:71:e6:e1:
         d0:c3:36:25:e1:37:d7:56:90:db:e2:87:a3:67:31:9a:6a:13:
         0b:47:c0:28:ab:2d:ba:82:04:87:5e:4b:56:df:d1:d1:c8:57:
         f9:d9:76:1e:5d:49:c6:a8:25:3e:24:e0:f9:d0:7d:9c:01:70:
         4c:9d:85:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----