This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a8add6c-a756-4905-9d5e-e45accad0762.roa
File:                     3a8add6c-a756-4905-9d5e-e45accad0762.roa (raw, json)
Hash identifier:          5vLaObt3WWQB43UmKdrtGPY2w2X0mwQi2i9Xj7ew9uA=
Subject key identifier:   14:F5:67:6F:81:1B:B5:BE:5B:D2:57:FC:AC:DD:B9:2C:87:F1:3F:CB
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6738E3DCDC9A7143C906ECDBD34ED068AB3F37B4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a8add6c-a756-4905-9d5e-e45accad0762.roa
Signing time:             Tue 10 Dec 2024 00:00:00 +0000
ROA not before:           Tue 10 Dec 2024 00:00:00 +0000
ROA not after:            Tue 14 Jan 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:38:e3:dc:dc:9a:71:43:c9:06:ec:db:d3:4e:d0:68:ab:3f:37:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 10 00:00:00 2024 GMT
            Not After : Jan 14 23:59:59 2025 GMT
        Subject: serialNumber=9699866741a0d920a22e6472d6c40c0fc7f2fcc82d5007db6ed250ae41f6bc51, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f4:a8:fa:98:3f:9f:e0:c5:39:fb:e0:61:d8:
                    28:4f:89:4e:17:d9:e6:60:82:b2:24:c1:63:aa:67:
                    09:de:cb:60:ad:55:d3:89:53:c7:37:6d:88:0e:b8:
                    c1:04:c2:65:cb:11:79:01:7f:4d:c1:99:82:3b:c9:
                    cc:19:5a:8c:c2:cb:e1:82:22:98:bf:97:1f:07:ac:
                    e5:b7:2f:08:b1:3f:8d:ea:a2:65:40:05:7a:71:49:
                    fa:50:92:d8:0c:0f:a6:19:27:bc:be:73:8f:fc:f9:
                    94:6d:3e:09:ad:45:4f:4d:b9:32:18:1c:ef:c9:22:
                    25:25:82:86:96:e0:a4:c3:99:0d:13:fb:9e:45:e2:
                    38:f2:8b:b8:b3:96:35:8f:93:8b:98:2d:5b:24:b2:
                    8d:bf:eb:e9:58:50:e6:68:51:e4:96:9d:54:23:00:
                    fe:f7:8b:8a:a1:7c:8a:27:92:81:28:8f:3c:a1:1f:
                    fa:22:85:7f:7c:3f:f6:9f:53:bd:07:40:dc:e9:28:
                    97:fa:b3:c5:06:a7:4f:40:35:b6:2d:3c:3b:5d:fd:
                    ee:65:9d:10:73:bf:c0:13:37:ac:f2:33:ab:2f:cb:
                    8c:63:2f:b6:27:fc:1d:7d:a7:9e:bd:10:03:82:a7:
                    7b:bc:f4:32:fe:3d:6d:3e:8b:f6:31:6b:18:a9:3f:
                    ba:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F5:67:6F:81:1B:B5:BE:5B:D2:57:FC:AC:DD:B9:2C:87:F1:3F:CB
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a8add6c-a756-4905-9d5e-e45accad0762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:4a:3f:ad:4d:10:e3:22:75:02:4c:6f:af:a7:fb:30:82:7a:
         dc:7a:e5:cc:87:a1:ea:8c:8a:4e:9e:d3:04:3b:b9:92:10:21:
         39:76:d1:28:7d:e0:c6:65:0d:7f:37:4c:26:b9:1c:6f:cb:4f:
         d8:e4:12:0b:e3:40:0d:20:9a:e6:fe:81:e4:74:16:3e:25:1b:
         73:ab:03:20:28:bf:c6:a6:e7:86:00:a2:38:b1:f7:13:cb:9d:
         9f:8f:22:6b:8b:5a:fe:58:17:56:60:3e:f4:36:a2:af:f9:ed:
         4d:21:ac:35:f6:8b:5d:1a:7e:40:07:f8:89:7b:c1:1a:b2:73:
         4b:65:44:e0:df:ef:b1:e2:e4:17:d1:3d:65:77:15:8a:ba:5c:
         1e:5b:fd:e7:52:8b:a6:cd:c9:57:94:41:3e:95:ef:b9:c1:db:
         0e:ad:95:97:72:91:fd:8e:f8:08:c5:b2:fc:ea:f7:8c:5e:13:
         c4:d7:70:fb:39:bd:83:e2:02:15:76:06:89:20:d6:4c:d8:6a:
         c7:31:df:01:b7:e2:ff:af:9b:d1:70:cb:c0:67:b0:03:65:39:
         6a:18:b8:27:9d:2e:2c:58:6e:23:44:1a:57:13:ef:09:2a:52:
         f6:31:3e:f0:16:4a:06:7f:62:bc:dc:1e:f6:f5:b8:77:57:fe:
         dc:38:c5:07
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZzjj3NyacUPJBuzb007QaKs/N7QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMjEwMDAwMDAwWhcNMjUwMTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5Njk5ODY2NzQxYTBkOTIwYTIyZTY0NzJkNmM0MGMwZmM3
ZjJmY2M4MmQ1MDA3ZGI2ZWQyNTBhZTQxZjZiYzUxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQ9Kj6mD+f4MU5++Bh2ChPiU4X2eZggrIkwWOqZwney2Ct
VdOJU8c3bYgOuMEEwmXLEXkBf03BmYI7ycwZWozCy+GCIpi/lx8HrOW3LwixP43q
omVABXpxSfpQktgMD6YZJ7y+c4/8+ZRtPgmtRU9NuTIYHO/JIiUlgoaW4KTDmQ0T
+55F4jjyi7izljWPk4uYLVskso2/6+lYUOZoUeSWnVQjAP73i4qhfIonkoEojzyh
H/oihX98P/afU70HQNzpKJf6s8UGp09ANbYtPDtd/e5lnRBzv8ATN6zyM6svy4xj
L7Yn/B19p569EAOCp3u89DL+PW0+i/YxaxipP7oTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUFPVnb4Ebtb5b0lf8rN25LIfxP8swHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzNhOGFkZDZjLWE3NTYtNDkwNS05ZDVlLWU0NWFjY2FkMDc2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGVKP61NEOMidQJMb6+n+zCCetx6
5cyHoeqMik6e0wQ7uZIQITl20Sh94MZlDX83TCa5HG/LT9jkEgvjQA0gmub+geR0
Fj4lG3OrAyAov8am54YAojix9xPLnZ+PImuLWv5YF1ZgPvQ2oq/57U0hrDX2i10a
fkAH+Il7wRqyc0tlRODf77Hi5BfRPWV3FYq6XB5b/edSi6bNyVeUQT6V77nB2w6t
lZdykf2O+AjFsvzq94xeE8TXcPs5vYPiAhV2Bokg1kzYascx3wG34v+vm9Fwy8Bn
sANlOWoYuCedLixYbiNEGlcT7wkqUvYxPvAWSgZ/YrzcHvb1uHdX/tw4xQc=
-----END CERTIFICATE-----