This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22029a77-1b4a-44a8-addb-9d284bb8d7a8.roa
File:                     22029a77-1b4a-44a8-addb-9d284bb8d7a8.roa (raw, json)
Hash identifier:          FZ+giIQujLPMsbvc8DROsxb9EKmDvnJFaiqPNiUofD8=
Subject key identifier:   38:06:8A:06:EC:02:E2:53:D9:A8:28:FB:B4:22:53:80:BD:F1:08:05
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6EE1195D2C827CD6F77DAB54B008F0C02655FEF2
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22029a77-1b4a-44a8-addb-9d284bb8d7a8.roa
Signing time:             Tue 04 Jul 2023 00:00:00 +0000
ROA not before:           Tue 04 Jul 2023 00:00:00 +0000
ROA not after:            Tue 08 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e1:19:5d:2c:82:7c:d6:f7:7d:ab:54:b0:08:f0:c0:26:55:fe:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul  4 00:00:00 2023 GMT
            Not After : Aug  8 23:59:59 2023 GMT
        Subject: serialNumber=ba02ac5fc23adcff7a4a9ff07ec513a530d08f66745455269d2cd24ea80da686, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b5:1c:63:3b:83:84:9e:4c:7b:c9:5b:2f:1d:
                    34:4c:c6:0d:1a:af:7e:0d:39:c4:d8:0b:52:a4:cb:
                    23:c4:55:19:9b:fc:1b:87:fe:78:47:a0:70:95:d5:
                    83:c9:66:95:7f:9b:d5:a3:20:b7:30:32:96:71:d0:
                    52:8a:49:17:2a:70:39:1b:1b:a7:3e:dc:b6:75:9b:
                    ca:7b:3e:2a:e5:fc:e8:c0:f8:dd:8c:6d:4a:8a:40:
                    44:5b:4b:3e:91:75:54:80:03:97:ef:cb:b4:02:ea:
                    eb:71:59:a2:65:0c:29:16:cc:12:dd:6b:b7:26:d4:
                    9e:0b:38:a0:c1:58:d9:3a:34:80:fa:c6:88:04:df:
                    6b:02:82:f2:6b:15:3d:ae:7c:51:c4:8c:d2:de:a4:
                    04:ab:6b:26:85:04:83:3a:7e:93:ab:f5:f6:2e:3e:
                    e7:bb:b1:7a:5f:5f:da:29:53:61:38:49:91:b8:73:
                    64:27:92:bc:d5:b9:ea:91:fb:26:23:56:bd:59:48:
                    fd:ad:01:a2:a4:14:97:2f:65:03:5a:4d:03:2d:4d:
                    6e:76:38:6b:12:92:66:b3:b3:78:00:00:db:a4:a0:
                    ec:3f:21:a7:1c:f7:de:b1:9c:71:61:9d:5c:a7:c5:
                    e8:49:d2:9f:a0:11:27:89:55:a5:7d:1a:49:4d:65:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:06:8A:06:EC:02:E2:53:D9:A8:28:FB:B4:22:53:80:BD:F1:08:05
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/22029a77-1b4a-44a8-addb-9d284bb8d7a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:11:1f:17:94:6e:55:c8:b3:02:62:f9:88:5a:cc:e6:78:15:
         d6:0f:95:75:ee:62:1e:33:9b:a0:ff:7e:d3:db:9c:35:59:5a:
         ae:ee:8b:99:39:ee:ce:bc:b2:28:51:3c:2e:8d:e5:86:f7:2e:
         1c:39:92:14:d1:88:5d:b7:86:45:d1:02:be:b6:1c:1b:35:24:
         e3:da:6b:35:37:af:80:48:09:ee:65:22:41:3b:fe:b2:77:24:
         55:e8:c1:9e:66:f3:8f:11:63:30:60:98:a1:a1:96:51:88:c6:
         be:4d:49:14:0a:b6:6a:7b:d2:f6:a4:eb:44:cc:58:ae:49:c2:
         eb:2f:30:f3:d3:50:2c:d2:d9:d0:92:64:31:39:d4:9b:54:53:
         08:ed:8a:d8:01:98:97:e2:0e:66:66:2a:08:a1:2b:50:d5:ac:
         c6:3f:db:77:ef:53:92:05:89:31:8a:89:68:35:37:60:85:04:
         03:6c:f5:cd:3d:a8:69:08:65:a5:c4:d6:c8:85:3f:c2:34:ce:
         40:18:8a:4c:ad:18:2c:12:8c:02:00:20:6b:82:7f:64:f8:21:
         d1:cd:01:55:f4:64:ee:22:61:1e:7d:a9:05:eb:8c:19:e5:27:
         8e:96:29:e2:63:3c:1e:2f:b1:9b:5a:56:90:34:da:19:ca:7a:
         b5:57:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----