This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4b17a439-99c1-479e-943d-ad330378b228.roa
File:                     4b17a439-99c1-479e-943d-ad330378b228.roa (raw, json)
Hash identifier:          0G+tgmnhh32fvNVBhYrZtQNYDvQV3RJT55iGPE3kh0I=
Subject key identifier:   66:F9:5A:88:9D:C2:9C:E4:B7:59:3A:6B:96:C0:E0:1E:41:70:5A:A0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       40D756978A027EC1BE64473B7FE1C06B8F314AB7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4b17a439-99c1-479e-943d-ad330378b228.roa
Signing time:             Sat 15 Mar 2025 21:13:20 +0000
ROA not before:           Sat 15 Mar 2025 21:13:20 +0000
ROA not after:            Sat 19 Apr 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d7:56:97:8a:02:7e:c1:be:64:47:3b:7f:e1:c0:6b:8f:31:4a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 15 21:13:20 2025 GMT
            Not After : Apr 19 23:59:59 2025 GMT
        Subject: serialNumber=435dab19363ae426d4bc5e173f3b0fc8e224c17b60e763db6b75b2dedf5a3c54, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:fc:cd:dd:96:01:14:a9:e1:27:c8:e4:40:
                    3f:ef:ec:2f:ba:7d:14:1d:a8:97:93:a2:a4:90:2a:
                    c6:4b:b7:03:b4:4c:2e:86:ed:92:b6:50:a7:25:7e:
                    e2:a3:73:43:7e:5a:9f:c2:ee:35:a8:b5:19:1a:15:
                    d0:f1:aa:c8:6c:e1:4d:cd:21:ed:cf:cd:8a:26:12:
                    ec:57:3b:96:7a:ef:ea:21:e9:5b:4f:fc:da:8e:3b:
                    c8:0e:f1:dc:ba:df:5e:6a:de:74:22:02:ab:bb:9d:
                    fb:a7:00:93:14:b1:f3:8d:7e:25:68:fc:d6:73:2d:
                    07:d2:36:8e:6f:09:62:4b:2a:e7:31:c1:07:3e:00:
                    6a:ec:07:d6:9f:9f:08:7a:6b:fd:ab:bb:3b:4e:bd:
                    4a:6a:84:59:c2:0c:f3:b0:71:e6:1a:3b:b2:8c:c1:
                    91:5f:35:7b:ce:0d:e9:3c:c8:31:e8:b5:70:5f:86:
                    c0:b5:f9:13:75:b6:e5:17:2d:39:9e:8c:1b:b8:0b:
                    d5:48:2a:2a:42:3d:39:f5:39:f7:88:f0:98:a1:1b:
                    d3:63:22:0d:3b:6a:63:c3:a3:5b:95:a7:6c:38:80:
                    4f:73:5c:12:e7:2f:a7:a4:46:f5:48:ca:fa:6d:6b:
                    41:9d:fc:2d:0d:f2:1d:79:22:a2:d8:d0:89:d5:6a:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F9:5A:88:9D:C2:9C:E4:B7:59:3A:6B:96:C0:E0:1E:41:70:5A:A0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/4b17a439-99c1-479e-943d-ad330378b228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:6d:8d:72:60:5e:a3:2f:a0:ce:8d:f7:ca:b4:cd:ac:15:4b:
         ad:58:74:3c:af:ff:87:39:5a:ba:ff:c2:52:51:85:a3:21:44:
         a2:33:82:dc:04:49:79:ca:9b:18:25:5d:df:ca:27:87:0d:b3:
         27:2c:41:19:ee:d0:7f:6f:b6:cc:ae:7a:18:15:f0:d9:e5:1d:
         b9:15:86:31:5f:28:76:c1:6e:88:fe:73:86:55:52:6c:5e:ee:
         36:23:e6:09:e3:69:e4:07:78:61:8f:1c:f1:35:8d:57:66:48:
         4e:7d:d4:21:98:fa:61:00:25:8b:13:0d:f5:75:b1:4e:eb:d1:
         08:10:7e:d3:ef:95:a6:00:c3:63:e2:0c:6e:de:a8:0c:12:d6:
         1d:e2:9f:71:37:fc:43:f9:45:14:bf:3a:41:c8:ac:4d:93:22:
         8e:e4:7f:e1:bb:e3:4f:89:db:b8:44:d2:7b:02:d6:bc:8b:32:
         a0:85:8f:06:ce:d9:8c:0f:68:1f:bb:02:95:f8:81:fe:ee:17:
         9b:7b:53:34:7e:ee:69:3b:33:3e:27:56:2b:ce:c3:dc:eb:47:
         29:0e:a0:1a:ed:c8:93:6b:25:ab:1c:35:00:f9:2c:fa:3f:55:
         25:ec:e8:16:aa:38:c3:6d:52:52:ee:dc:64:9e:91:de:4e:7d:
         ef:15:49:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----