This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/16084103-3548-41a7-ba61-0fd1d02b3f99.roa
File:                     16084103-3548-41a7-ba61-0fd1d02b3f99.roa (raw, json)
Hash identifier:          jabiv6Jsiy8B3jjgOISdelnVTnN2dZToUUzk2agOfhA=
Subject key identifier:   4C:16:CA:56:A4:FD:5C:DB:7D:33:6F:84:D7:A3:CF:B1:EF:77:D7:88
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       387B7ADFCF3344817223872B5CE1A28AD0A55B8B
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/16084103-3548-41a7-ba61-0fd1d02b3f99.roa
Signing time:             Sat 03 May 2025 23:28:17 +0000
ROA not before:           Sat 03 May 2025 23:28:17 +0000
ROA not after:            Sat 07 Jun 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7b:7a:df:cf:33:44:81:72:23:87:2b:5c:e1:a2:8a:d0:a5:5b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May  3 23:28:17 2025 GMT
            Not After : Jun  7 23:59:59 2025 GMT
        Subject: serialNumber=3f6c19d2de9c938be5b1049dd733155894adb69e353bd30512e3e7cc82c9fdca, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:22:32:32:c0:d4:0a:29:5d:01:53:69:61:
                    bd:c0:fe:81:93:fd:39:3a:32:96:03:44:21:b8:58:
                    09:d6:8d:3c:d2:29:73:ac:df:1b:5b:ff:81:3d:83:
                    83:c1:a0:ff:ae:8d:f6:d4:33:a3:a0:25:96:15:73:
                    72:68:e8:bf:06:1e:82:cf:34:07:64:9d:b0:e5:3d:
                    42:0d:13:97:a3:c8:e3:b0:2e:d4:79:9d:58:bf:82:
                    33:09:48:d8:de:5d:e6:eb:c2:64:73:4c:9c:7c:1c:
                    df:8d:b2:68:21:63:2f:c7:c6:fc:9c:f1:03:c4:69:
                    b0:ce:36:ba:a9:b1:47:35:4c:a4:e6:c7:45:5d:cf:
                    ef:b7:6d:24:87:92:79:dd:d6:ec:1f:ee:38:ea:f9:
                    c0:91:14:1d:9d:57:18:23:a7:61:8b:bc:1a:d0:de:
                    1b:8b:2b:d7:59:06:df:c7:58:18:2d:7f:50:68:4c:
                    22:7b:53:bb:97:5d:bf:b5:65:96:2d:a2:fd:fc:2c:
                    d2:a3:85:8d:55:dc:67:73:03:35:df:a6:18:e7:df:
                    c0:60:5a:fa:56:5c:4c:2e:99:31:af:cd:12:43:69:
                    3f:7e:73:47:67:a9:a5:bf:a2:31:73:30:51:90:d3:
                    40:90:80:13:0a:67:a5:d9:57:60:db:08:4f:10:0d:
                    ff:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:16:CA:56:A4:FD:5C:DB:7D:33:6F:84:D7:A3:CF:B1:EF:77:D7:88
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/16084103-3548-41a7-ba61-0fd1d02b3f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:79:e0:0e:45:cd:de:07:89:89:c1:d6:01:09:41:4b:d1:af:
         8c:81:ee:45:55:36:c6:49:b1:bf:fa:aa:5b:d7:bd:3b:a5:79:
         e5:3c:93:b9:90:64:7a:3a:dc:eb:da:9d:3c:62:54:5e:a6:5d:
         d1:38:8e:a9:f9:5b:92:9c:9d:fd:55:79:f0:69:b5:3c:69:e5:
         9a:7f:4c:9c:8c:2c:08:ff:89:c1:07:01:3c:e0:63:0a:51:6b:
         b3:19:c3:bb:45:2e:89:dc:25:b5:ca:12:17:86:6b:0d:11:3c:
         18:41:5f:de:6f:a8:f4:6f:86:34:18:14:b0:43:8a:fa:29:f7:
         3f:4e:42:4d:56:bb:5e:fe:3a:ed:52:06:b9:3d:e5:06:6f:c3:
         0f:50:66:7a:91:1a:63:a4:3e:36:25:44:9b:d1:2e:48:7a:21:
         f7:dd:b5:27:80:22:09:7d:8b:5e:a2:cd:f9:82:51:73:73:65:
         34:7f:ed:f2:1c:6e:d1:3d:41:d8:ba:ae:43:a0:db:ad:39:46:
         3e:f0:f4:b1:61:29:9c:64:d8:98:ed:2c:5f:21:2a:4f:fc:be:
         43:c4:87:72:2a:9a:f6:98:dd:27:64:22:14:50:63:e6:7c:2d:
         1f:1e:ec:4f:83:3e:38:fb:07:73:85:6e:e4:1c:36:2a:24:70:
         aa:97:b0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----