This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f7035cd-da14-464e-bc80-36908c9e44f3.roa
File:                     1f7035cd-da14-464e-bc80-36908c9e44f3.roa (raw, json)
Hash identifier:          ZTvHM2uOxxuoD0ALB06oicumr4uMxPHnt3YpJxL2SOw=
Subject key identifier:   82:45:63:CC:5D:43:89:71:8D:AB:8F:1D:0A:7E:CC:79:00:B5:EA:6D
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       061C3CD521C9E7436DEAF9E7E79C1B5CB94C9955
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f7035cd-da14-464e-bc80-36908c9e44f3.roa
Signing time:             Tue 16 Jul 2024 00:00:00 +0000
ROA not before:           Tue 16 Jul 2024 00:00:00 +0000
ROA not after:            Tue 20 Aug 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1c:3c:d5:21:c9:e7:43:6d:ea:f9:e7:e7:9c:1b:5c:b9:4c:99:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 16 00:00:00 2024 GMT
            Not After : Aug 20 23:59:59 2024 GMT
        Subject: serialNumber=ea028a1a82f49b9c37d7b413719563af41c18bb2d3703ecb17153a1b5da72e59, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:80:37:0c:35:91:e5:cf:65:d1:ae:3e:81:1c:
                    59:6d:aa:50:b3:82:ab:00:aa:f0:bf:9d:88:8c:6c:
                    14:f3:d9:75:a4:ad:12:43:2b:92:83:51:e1:60:92:
                    67:be:fa:7b:7a:9d:f5:0b:05:15:0e:df:cd:8d:67:
                    07:c5:4d:fa:ee:a0:f9:82:45:d0:9a:bc:97:cb:14:
                    b0:e1:c5:fb:44:6c:75:25:02:7b:67:39:eb:09:9e:
                    87:98:a4:1d:7b:94:d6:52:44:4f:d4:e8:4d:4a:8c:
                    ec:d6:02:f9:91:cc:1f:b4:7f:8f:6a:32:30:1c:cf:
                    53:6a:89:61:de:aa:bb:2a:9a:f7:b3:6a:19:b4:53:
                    ac:6e:2a:16:9b:59:4d:99:75:74:e5:20:15:f8:9d:
                    d9:2a:80:b0:97:3e:79:79:89:1c:85:13:bf:00:24:
                    54:33:fb:b0:a7:00:f3:00:a5:35:8c:f7:3c:c6:fa:
                    e8:22:59:2d:94:70:2d:58:57:d4:17:d7:29:14:4c:
                    2c:0d:a2:0c:64:1f:e5:a1:bb:eb:71:c1:01:83:5d:
                    8f:12:3d:3d:4c:92:c6:1a:25:d6:a6:e6:4a:bf:af:
                    c2:43:5c:76:92:f2:6b:90:d8:ca:14:ea:b4:f4:e0:
                    e6:2d:90:c0:63:7d:25:98:fd:dd:62:71:68:b0:fc:
                    bf:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:45:63:CC:5D:43:89:71:8D:AB:8F:1D:0A:7E:CC:79:00:B5:EA:6D
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1f7035cd-da14-464e-bc80-36908c9e44f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:a3:7f:ce:eb:60:fc:0b:e9:c9:76:57:d2:6b:f8:8c:8f:82:
         97:2b:fc:f6:09:e4:b1:3a:8c:07:be:11:13:ea:34:73:83:92:
         44:1c:7f:f2:0f:41:36:85:df:bf:87:a7:8e:0b:ab:5b:b5:89:
         62:41:06:e5:9a:9a:db:dc:1d:9a:3e:17:b2:fe:b3:19:0d:4d:
         85:df:e7:69:f1:e2:55:d7:96:4e:b3:af:d1:38:8a:a6:b9:ca:
         a8:35:ce:92:ef:e5:5f:65:b6:41:2c:0b:0a:3d:42:fe:e7:02:
         cf:b1:43:74:12:75:dc:76:34:3b:13:13:d7:5c:d4:f1:d1:b9:
         98:16:e0:04:82:e6:e7:53:a6:e1:23:12:9a:d0:84:01:48:dc:
         10:ed:c3:e3:69:58:64:68:3a:70:5a:c6:0b:6c:82:50:5d:37:
         b0:de:ef:64:08:67:38:39:0c:63:67:a6:43:b0:f9:a1:b9:b9:
         88:46:70:6c:27:f0:b3:57:6c:6f:5a:9f:85:74:4d:82:c2:a8:
         18:b6:b1:55:2f:30:11:ae:19:2b:40:79:fa:87:93:5b:78:26:
         5e:09:1c:b0:c6:58:c8:3f:19:5e:b5:b2:33:dc:1f:c8:4c:c6:
         7f:12:82:97:28:8b:98:80:ac:20:1a:fd:3d:49:8d:ff:0a:7a:
         35:56:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----