This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18425cb6-b845-43d7-8eb1-08bcf9943d92.roa
File:                     18425cb6-b845-43d7-8eb1-08bcf9943d92.roa (raw, json)
Hash identifier:          vy1wNkY5aFXY34/tMalKydl87cRw19zkJssI6VVznVA=
Subject key identifier:   A6:B2:65:E0:C5:C3:F1:5C:3C:A3:E4:12:3C:84:21:84:DB:9E:DF:36
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6EA96917140A3656B5E4C41B838E31F2D26B40ED
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18425cb6-b845-43d7-8eb1-08bcf9943d92.roa
Signing time:             Tue 26 Nov 2024 00:00:00 +0000
ROA not before:           Tue 26 Nov 2024 00:00:00 +0000
ROA not after:            Tue 31 Dec 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a9:69:17:14:0a:36:56:b5:e4:c4:1b:83:8e:31:f2:d2:6b:40:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 26 00:00:00 2024 GMT
            Not After : Dec 31 23:59:59 2024 GMT
        Subject: serialNumber=41797e78a56ee30adb45ae2f5f7feb2fc7af005e564edda3e7e55a08b0ce85f6, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:1a:2b:55:03:5d:57:5d:47:c2:bd:72:c1:
                    14:c7:59:ed:ef:fb:40:74:b1:25:a8:59:ab:14:f8:
                    38:21:1a:cb:af:1c:49:43:eb:a4:a0:0e:db:0e:5d:
                    ba:79:c8:f2:16:45:30:3b:2e:06:f2:5f:94:e8:b6:
                    8a:1b:47:18:82:82:e0:f6:fb:4d:93:0d:1e:db:a6:
                    61:80:90:bf:77:9c:cc:a4:fc:07:4c:67:4e:b0:45:
                    36:e2:d0:3f:7e:98:0d:2c:b2:de:99:aa:12:b8:32:
                    8a:7c:41:64:94:c7:08:a0:df:c0:2f:33:18:54:b2:
                    10:0f:e0:07:ad:46:17:bc:40:3e:37:61:df:ba:bb:
                    3a:1b:cb:69:72:de:5e:ba:6b:09:b0:3d:10:11:2b:
                    ef:c5:f3:f8:64:08:d6:84:f6:6b:b3:05:f5:31:35:
                    b1:fb:77:f9:45:71:cd:ab:2b:f3:e2:e7:97:23:2e:
                    63:3b:93:77:d8:f8:5c:2a:b2:63:83:c6:7f:bd:4e:
                    f0:ab:d2:ae:a8:a9:b4:7a:ee:3a:d0:fa:ed:b6:27:
                    8a:5a:d7:cb:e1:ce:49:d0:e7:03:43:ec:2d:ad:53:
                    cd:a7:42:57:6a:95:d3:4f:24:6a:ca:32:5b:3f:b8:
                    29:43:c7:2b:0a:90:27:01:63:36:28:67:8f:2e:dd:
                    80:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B2:65:E0:C5:C3:F1:5C:3C:A3:E4:12:3C:84:21:84:DB:9E:DF:36
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/18425cb6-b845-43d7-8eb1-08bcf9943d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:06:42:57:de:cd:29:97:e6:63:8e:ea:84:c1:83:2d:a8:de:
         04:1f:91:7e:83:7c:e3:4d:5b:9a:ec:27:b4:ac:36:20:f9:4d:
         b1:29:0c:28:3e:1d:b9:cd:e8:ab:50:24:31:99:69:ab:68:9a:
         27:37:2e:a8:77:d3:3d:dd:4e:73:90:51:06:b7:22:b9:ad:ea:
         9e:52:fb:54:a9:c3:71:7d:67:66:96:7d:66:b4:8f:33:dc:b0:
         14:f4:34:60:50:cb:80:38:d8:02:46:8b:ed:de:11:cd:16:bf:
         19:9d:95:9a:58:2f:49:5a:36:12:82:24:76:62:3a:6b:9d:ea:
         fc:c6:b8:b0:c1:56:e7:32:d2:a8:91:27:c7:25:e3:25:6e:2e:
         13:d1:39:b1:53:cc:ad:e0:96:74:d6:6e:77:f6:95:b9:35:75:
         8f:75:59:4b:db:08:29:be:d5:a6:23:51:06:64:e3:b7:d9:9a:
         0c:48:cc:62:e4:55:45:ea:e0:f6:99:2b:40:f6:1e:cb:4c:49:
         e7:c0:fe:d1:fe:63:a5:17:a4:d6:6e:67:56:a3:3e:69:e0:3b:
         6c:6d:c3:14:6c:45:1d:27:0c:f5:c1:7c:f6:f1:76:da:19:73:
         69:c0:f9:2a:19:35:cf:d7:4e:58:2a:a3:93:28:aa:a2:d3:62:
         04:a2:06:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----