This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/252dffcc-be19-40e5-9c2f-95e373eaffcc.roa
File:                     252dffcc-be19-40e5-9c2f-95e373eaffcc.roa (raw, json)
Hash identifier:          Fd5dPy/bW6FbyY6vk/A5d6vrQFN0mgfxYZCqL7zZGpY=
Subject key identifier:   01:14:B5:CF:52:92:6A:4F:1D:EE:88:14:38:5D:06:45:C1:70:6B:D0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6C2F93615E1EF7686D4F448F0CD12625F5B396E7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/252dffcc-be19-40e5-9c2f-95e373eaffcc.roa
Signing time:             Mon 13 Nov 2023 00:00:00 +0000
ROA not before:           Mon 13 Nov 2023 00:00:00 +0000
ROA not after:            Mon 18 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2f:93:61:5e:1e:f7:68:6d:4f:44:8f:0c:d1:26:25:f5:b3:96:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 13 00:00:00 2023 GMT
            Not After : Dec 18 23:59:59 2023 GMT
        Subject: serialNumber=4b31659f507b35bfcf28fd298a4410139188fb8b5186f2c79dc82374f1342979, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:50:83:a8:96:00:44:1a:44:16:7e:34:3b:13:
                    d6:b9:fa:28:fe:46:c2:14:22:fe:b4:68:a4:32:de:
                    52:3b:c8:33:99:0e:b4:f6:62:3f:81:af:94:61:f5:
                    07:4d:07:67:33:0c:3e:20:fb:38:de:f7:8e:86:e3:
                    53:5b:b0:16:6a:94:f4:c5:18:dc:1d:09:f4:2a:ba:
                    80:a8:6b:2d:29:b9:ed:e9:26:df:db:80:c3:19:32:
                    b7:71:40:68:d0:6e:b2:6f:8e:1d:24:cd:a7:c6:a4:
                    93:57:4c:95:f2:c6:d3:5b:63:2f:43:1a:3e:5c:2e:
                    29:6a:7c:89:b6:12:61:42:f2:0e:d6:dd:05:e4:3b:
                    9e:15:61:a8:32:e1:04:72:69:c0:8a:b3:22:ec:a0:
                    93:2e:8a:a7:46:56:42:ca:27:9b:7d:df:56:78:c1:
                    5b:34:95:d0:b7:6f:75:d6:21:57:f4:81:b1:1e:68:
                    ed:90:c5:ed:55:97:81:34:ce:c9:ba:91:2c:ef:fd:
                    26:12:b9:17:32:4c:a4:f0:bf:b7:02:4e:1d:50:c4:
                    42:ef:75:ab:8d:ea:24:36:7a:c6:d7:f1:2d:0d:19:
                    b1:bf:10:81:9e:14:0c:90:23:47:bd:c2:02:a3:4e:
                    e7:42:28:01:64:64:3d:5b:ba:88:98:d2:2e:ca:c0:
                    63:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:14:B5:CF:52:92:6A:4F:1D:EE:88:14:38:5D:06:45:C1:70:6B:D0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/252dffcc-be19-40e5-9c2f-95e373eaffcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:3d:b3:00:76:19:c2:d6:75:5b:07:42:5c:04:3c:a7:c9:a0:
         c7:3b:e2:94:94:fd:c7:c4:d6:a4:4c:31:5b:54:63:f7:f3:bf:
         c2:18:18:a5:a3:e2:e0:d3:7f:cc:3e:71:54:13:6d:f5:28:09:
         7d:de:64:e9:b8:bb:ab:84:9c:05:5d:8c:df:a7:ef:5e:c5:c4:
         93:e3:62:d2:ed:6f:52:31:a6:ac:b0:3e:25:7b:2c:b3:b9:89:
         99:55:63:1a:d5:2e:fa:63:07:ba:46:70:81:f6:4b:59:6c:45:
         3e:e3:7b:25:e6:13:9e:d8:49:9b:71:25:d4:2a:4c:bb:ed:16:
         89:c4:ae:0c:49:ef:98:b0:a0:bd:c9:91:b8:0f:f7:3a:89:bf:
         70:9c:2a:b4:b9:ad:2f:aa:10:51:d4:19:c5:6c:7e:00:11:9f:
         28:19:f6:fd:bc:98:44:71:10:f4:3e:c9:b5:64:83:74:21:e4:
         1d:c2:fb:20:f1:31:32:c5:32:1e:ea:8a:b9:93:73:61:16:27:
         ce:d4:d5:83:c5:93:20:35:40:5e:11:6f:31:65:41:11:fa:60:
         a4:00:92:c7:31:5b:24:52:3c:6e:a0:61:67:2e:02:25:18:43:
         9a:ac:b3:ad:f4:03:b7:4e:04:8e:91:58:93:56:cd:c9:64:1b:
         a7:6d:8d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----