This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/470762a7-da36-486c-81d5-4ce00c6f325e.roa
File:                     470762a7-da36-486c-81d5-4ce00c6f325e.roa (raw, json)
Hash identifier:          GAgf83Wh4Q8AErt2DG6jc56DQdVunYzXfz0FdAIOsRk=
Subject key identifier:   68:F1:11:D1:09:F7:C5:C1:67:07:39:E5:DD:49:5E:0B:75:90:C5:72
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0FACF7756B75072A910A384E5BE7AB775C388F30
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/470762a7-da36-486c-81d5-4ce00c6f325e.roa
Signing time:             Thu 27 Mar 2025 09:08:20 +0000
ROA not before:           Thu 27 Mar 2025 09:08:20 +0000
ROA not after:            Thu 01 May 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:ac:f7:75:6b:75:07:2a:91:0a:38:4e:5b:e7:ab:77:5c:38:8f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 27 09:08:20 2025 GMT
            Not After : May  1 23:59:59 2025 GMT
        Subject: serialNumber=728a5cae48430be7cafbbaab908db376e9de9112e6636434166464ca091985db, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b0:4a:68:ce:80:a1:9f:c9:51:a7:dc:68:6f:
                    d1:eb:01:16:9b:e6:45:cf:5b:c2:42:21:47:17:b0:
                    12:2f:3f:6a:00:96:72:f3:58:bd:d8:1a:48:c8:ae:
                    b7:67:f0:8e:02:73:67:95:1f:71:58:b9:ea:1e:89:
                    14:6e:4a:2f:f8:61:88:85:3e:23:72:52:85:61:a6:
                    de:35:d8:45:15:27:68:f3:6c:cc:92:6f:47:70:53:
                    bf:64:60:4b:b2:12:0b:6b:09:94:ec:f6:a6:d3:71:
                    16:ff:0b:0e:e2:cd:3f:de:05:a8:49:63:3c:8b:91:
                    b1:ef:2d:7b:64:8c:b2:de:94:c8:3e:8d:59:4a:d3:
                    f2:32:85:80:e9:8a:58:74:30:6b:89:c3:9f:59:e0:
                    8e:80:8a:78:9b:a8:c9:1f:94:7d:57:97:df:1c:43:
                    7e:10:c9:bd:1b:2a:16:ed:f9:eb:5a:59:27:70:53:
                    b4:b0:0d:05:d4:c6:d1:d4:ec:9d:90:dc:33:b7:57:
                    7f:84:b5:eb:1f:04:5f:b8:3c:b5:1b:80:20:63:6b:
                    dc:01:8e:64:e1:4b:be:e7:60:c5:49:92:4a:d3:14:
                    3e:a1:62:e4:69:1f:6a:98:ec:74:df:82:34:71:53:
                    00:0e:95:81:2b:4c:13:4e:b0:76:a4:de:48:fe:a5:
                    34:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F1:11:D1:09:F7:C5:C1:67:07:39:E5:DD:49:5E:0B:75:90:C5:72
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/470762a7-da36-486c-81d5-4ce00c6f325e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:58:ca:c9:90:1a:21:eb:98:f2:0d:33:c0:a7:43:7a:c9:2e:
         a9:f4:8c:1d:b7:e9:4f:d1:10:be:fc:c2:e9:06:de:b5:8b:1b:
         0c:4d:6a:0e:d7:95:28:ee:c4:a0:2b:10:40:a9:b5:f3:af:f0:
         3d:d5:d0:2f:a4:dc:3a:41:23:28:ac:a0:33:8b:34:a6:b1:f4:
         ee:a3:7e:f2:81:d4:fa:9c:28:db:b3:92:1c:65:01:35:a5:a8:
         cf:13:e0:29:bf:71:0d:51:66:90:c0:67:63:c4:3d:0a:6e:81:
         ce:5a:2d:2b:b8:05:76:06:85:d5:4d:1a:1a:82:1f:e9:58:67:
         35:da:5d:5e:87:c1:90:b2:7b:27:54:59:a9:84:38:08:03:52:
         57:28:08:3b:c8:f9:d1:78:51:ca:cb:f3:c8:0f:a4:b6:29:5c:
         cf:44:b7:e6:b7:74:25:2c:9c:2e:cf:dc:b6:b4:68:38:da:5a:
         45:3a:c2:4a:6f:d2:6c:fa:d8:fd:a4:8e:46:85:a9:43:0c:f8:
         f1:fe:e2:31:ec:a8:6a:ac:62:28:4e:ea:96:51:15:3d:b3:95:
         fd:0d:a0:6e:5f:dc:25:6e:3c:0c:66:50:17:33:a0:38:c1:a5:
         6c:b5:c7:19:e7:db:73:2a:2a:2f:f5:49:f7:84:e3:60:95:ef:
         03:bd:24:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----