This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1e574d59-c49b-4d88-95c4-c91c8eaecd4c.roa
File:                     1e574d59-c49b-4d88-95c4-c91c8eaecd4c.roa (raw, json)
Hash identifier:          cEEeAq2iz/OMePYDN5INtCCT3geLWatU1mFG1jDSdBE=
Subject key identifier:   2A:E4:5D:96:BD:4F:F8:43:81:5D:B7:A2:C5:24:32:86:25:D7:FE:02
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       1F82D17400FB784469464E791045EFD2223DD8A7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1e574d59-c49b-4d88-95c4-c91c8eaecd4c.roa
Signing time:             Wed 23 Apr 2025 22:38:17 +0000
ROA not before:           Wed 23 Apr 2025 22:38:17 +0000
ROA not after:            Wed 28 May 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:82:d1:74:00:fb:78:44:69:46:4e:79:10:45:ef:d2:22:3d:d8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 23 22:38:17 2025 GMT
            Not After : May 28 23:59:59 2025 GMT
        Subject: serialNumber=f9265f7bd49be8f7f19118fec176d8b335da529856efa17e42a06396da3b2d12, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:e8:42:61:fa:0e:9e:52:08:43:af:41:32:
                    a7:b5:90:a2:89:16:72:7f:98:76:b5:40:e3:30:40:
                    45:7c:c8:5a:5a:a1:54:55:2e:29:c0:1b:09:c8:3b:
                    6f:6c:40:48:91:9a:0b:9b:af:0c:64:ad:c6:84:b5:
                    c8:92:5d:ed:49:7e:46:14:59:cc:87:ea:90:e7:77:
                    48:8d:f2:09:27:78:08:6a:86:57:fc:eb:fd:68:9f:
                    04:75:f6:cd:3b:8b:45:ea:1d:73:d4:45:ec:9a:ba:
                    85:8b:08:68:e7:68:4b:8a:02:d9:72:4e:88:86:f3:
                    07:af:5c:3f:3d:50:13:40:bc:3c:eb:79:a9:3a:d6:
                    67:6f:bb:94:54:3b:69:fe:e3:70:c6:df:0b:26:26:
                    61:57:a8:ae:cb:53:be:fe:90:7a:0d:08:4f:9d:88:
                    d5:08:96:d9:cc:97:ac:d9:c6:4c:d9:77:b6:aa:82:
                    a9:a1:0b:d9:d6:61:70:36:84:b5:e8:e9:af:1e:3d:
                    59:c0:bd:eb:a1:5a:a9:96:6f:73:ed:a3:6b:d4:23:
                    e1:81:50:e4:fe:c6:d1:94:63:08:bd:03:6a:6a:33:
                    18:f6:7d:33:2c:5e:80:93:79:ee:46:43:31:8b:62:
                    a9:88:79:bd:4b:83:b0:67:df:b7:c5:02:5e:84:9f:
                    7e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E4:5D:96:BD:4F:F8:43:81:5D:B7:A2:C5:24:32:86:25:D7:FE:02
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1e574d59-c49b-4d88-95c4-c91c8eaecd4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:a6:7a:16:18:a9:94:cb:af:f9:4a:19:ca:01:91:0b:01:20:
         5a:3b:20:1b:87:9c:c4:3d:7b:bf:71:fd:24:a5:d4:5d:ca:f3:
         40:36:4b:99:ec:bf:88:27:f8:09:a7:d1:2d:12:31:4a:27:d0:
         be:a3:1a:e7:0c:d4:c9:27:1d:4c:b3:4d:b7:a5:8a:6e:a2:bd:
         95:00:4a:8b:81:72:52:62:e6:9d:60:36:14:03:60:d0:51:f4:
         8a:f4:88:ab:b7:63:83:08:22:af:01:51:b1:80:08:15:ee:7a:
         ec:c6:2d:06:a4:93:db:52:a5:86:72:cd:0c:96:56:da:92:fb:
         e4:e3:40:e2:83:5d:9d:99:b2:75:64:25:08:86:f6:d5:b6:ec:
         c0:8b:88:a3:6f:3e:dc:44:8e:84:55:74:ad:9c:de:4a:e4:a8:
         d6:4e:42:a5:13:11:64:09:57:5c:4d:72:91:00:13:25:16:8e:
         df:03:ba:9c:19:93:c5:5f:09:73:1e:6d:38:1a:68:33:e3:09:
         c5:db:81:30:c1:7e:ea:36:d6:83:d0:ee:01:a1:54:28:d8:d6:
         98:74:05:1e:fb:ce:55:c2:04:2a:79:10:5c:73:b6:12:5c:34:
         4c:81:67:a1:7b:62:59:bb:dc:ac:af:31:76:c4:0b:0f:bd:88:
         5d:02:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----