This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3981cb0b-706a-4b72-af0f-a5296a85014b.roa
File:                     3981cb0b-706a-4b72-af0f-a5296a85014b.roa (raw, json)
Hash identifier:          qq9SvGDPRyjsxD5OC/+JbfHj2LOBP/LNU630ti0UlV4=
Subject key identifier:   8F:43:6C:17:E0:90:94:BE:AF:AC:02:26:8D:37:E8:34:D9:4B:26:40
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       496D6981FFB0AAE9F6FB12A049674D040C5F21AF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3981cb0b-706a-4b72-af0f-a5296a85014b.roa
Signing time:             Mon 20 Nov 2023 00:00:00 +0000
ROA not before:           Mon 20 Nov 2023 00:00:00 +0000
ROA not after:            Mon 25 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6d:69:81:ff:b0:aa:e9:f6:fb:12:a0:49:67:4d:04:0c:5f:21:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 20 00:00:00 2023 GMT
            Not After : Dec 25 23:59:59 2023 GMT
        Subject: serialNumber=d8c4b6c171891618e090f21151b5f1dbfd9ccf4da20ab1d4465863dd65791a6f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:55:31:ed:1c:9d:e4:c5:0e:81:f3:d1:8c:
                    d7:b4:ec:6a:3c:7c:c5:ae:78:e3:25:c8:e4:f0:83:
                    35:22:3e:c1:46:c3:d9:7c:85:37:72:2f:e7:42:b9:
                    15:5b:01:35:0e:7a:91:7a:d9:1a:93:04:10:77:d3:
                    d6:11:3a:53:18:b4:48:d1:30:16:4d:9e:d9:65:72:
                    2d:3b:a1:59:0d:18:f1:99:2b:46:39:1e:6c:82:01:
                    41:39:d6:5d:07:1c:c5:1b:72:c0:7c:03:aa:c3:9f:
                    e3:9c:44:b4:50:66:57:fb:dd:7d:38:4c:85:72:85:
                    be:1d:87:5c:70:93:1c:28:99:3d:21:86:b4:50:1a:
                    51:74:52:ef:3e:a2:56:5e:84:07:e7:9e:c8:59:b2:
                    14:ee:13:00:0e:fe:05:d6:2f:86:60:8f:95:ba:cd:
                    6a:b3:db:86:1a:0e:76:9f:fd:3b:0b:17:8b:89:1a:
                    e4:9d:e5:1e:b5:51:25:58:0f:6b:0e:42:1f:1e:b0:
                    42:e6:24:53:b3:07:1b:38:61:20:9e:85:68:ee:cd:
                    d2:eb:7e:65:a4:51:33:c7:f3:54:f5:7c:47:2e:7c:
                    c7:04:4d:79:34:7c:3e:c0:81:e1:b6:fc:13:af:97:
                    ed:ac:e9:5f:91:82:f6:28:77:47:ed:94:6b:ac:6a:
                    66:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:43:6C:17:E0:90:94:BE:AF:AC:02:26:8D:37:E8:34:D9:4B:26:40
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3981cb0b-706a-4b72-af0f-a5296a85014b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:24:b8:17:72:cc:72:a4:14:33:8e:80:17:1d:e9:00:78:
         a0:8a:c5:97:2d:4d:86:b0:23:9c:48:78:39:8b:a7:67:00:e5:
         ef:56:24:fa:17:ce:26:fd:c5:9f:e2:f5:e3:41:6f:05:0c:33:
         c5:77:73:9e:89:a7:98:5e:77:24:52:06:bf:5d:7c:5f:d8:ab:
         5a:5b:b9:fd:ff:85:d6:c4:61:d3:21:87:2a:37:56:0f:1a:36:
         04:b8:3f:7c:a9:35:08:85:2a:b2:47:e3:d2:f0:e8:87:45:d9:
         44:00:9f:7a:f5:88:e1:8a:ba:d8:94:cc:a4:28:a0:45:0b:6a:
         f4:7d:1c:fc:bc:a4:db:36:8a:79:e6:39:79:dc:b9:98:9f:a0:
         49:6d:43:34:25:d0:23:40:73:41:2f:63:fb:6b:3b:23:44:de:
         5e:19:90:68:8d:d2:cb:aa:bc:45:df:6b:c1:eb:ce:ac:29:3c:
         21:43:75:62:cb:76:da:10:33:83:ff:80:ee:f5:9b:f4:43:6b:
         1c:9f:04:bb:fa:f6:75:1f:7b:d3:75:9f:44:a7:44:d9:49:e6:
         25:5b:fe:90:e0:ce:11:06:af:e6:0f:38:2c:34:7c:7a:7a:66:
         78:d8:64:e4:41:05:c4:79:29:ca:1c:9c:c5:a3:3d:47:0e:85:
         ee:e6:3b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----