This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/630b72c1-ddbd-44cd-9dc8-1206adf63d06.roa
File:                     630b72c1-ddbd-44cd-9dc8-1206adf63d06.roa (raw, json)
Hash identifier:          T7DlZAjEN2LN3zGM/xnvkm4Laj6/dTskjZaWDkyE4Zw=
Subject key identifier:   DC:AB:9A:92:04:A6:1D:C4:09:60:BD:08:9D:94:BC:99:F3:4C:4B:92
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0342BCE80D5F9899BA0575894545C5D4D6D08EEA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/630b72c1-ddbd-44cd-9dc8-1206adf63d06.roa
Signing time:             Wed 03 Jan 2024 00:00:00 +0000
ROA not before:           Wed 03 Jan 2024 00:00:00 +0000
ROA not after:            Wed 07 Feb 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:42:bc:e8:0d:5f:98:99:ba:05:75:89:45:45:c5:d4:d6:d0:8e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan  3 00:00:00 2024 GMT
            Not After : Feb  7 23:59:59 2024 GMT
        Subject: serialNumber=160a74b547bf3fbe3f672dde39fc6724b361e007152b199ecd911a0715e04f02, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bc:b0:8c:7a:35:fb:12:20:d0:b6:a2:79:dd:
                    b1:d6:45:f1:19:bd:21:ff:b9:c5:c6:df:d5:3c:53:
                    83:77:da:9c:d7:77:e1:c9:a0:61:90:8f:d8:5e:fc:
                    8c:82:e3:7c:40:d9:a3:3d:cc:3e:3a:a9:50:72:07:
                    d4:57:dd:f9:48:37:14:a4:cf:6d:9f:c6:19:33:ef:
                    a9:81:82:ce:2a:98:e0:42:c3:6b:9b:e5:f5:07:05:
                    26:67:ac:43:f0:7e:05:9f:64:ce:ad:fb:2b:97:21:
                    74:f9:74:f0:6b:e0:11:91:58:2c:54:0f:bc:03:31:
                    6b:ba:50:f1:42:47:78:57:fd:2b:37:37:a3:24:b5:
                    0f:8c:bd:f1:e4:67:16:93:88:bf:68:f3:62:3b:48:
                    37:7c:f6:c8:7f:58:42:35:6d:6e:36:d3:53:33:0d:
                    ad:ea:55:7f:ba:cf:34:37:2d:3f:55:4d:3b:ec:bc:
                    22:a9:f4:c7:7b:23:d8:5e:67:87:81:49:63:96:68:
                    e3:ec:02:8c:3c:50:05:b7:c5:23:f7:8b:8e:8f:09:
                    4d:60:3f:b3:96:0d:94:97:f7:84:f2:04:e1:16:38:
                    91:21:fd:09:5b:dc:f0:81:39:d5:90:79:34:72:9b:
                    9c:31:94:a3:e7:ba:d1:1f:49:6d:ab:fb:5c:d3:ad:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AB:9A:92:04:A6:1D:C4:09:60:BD:08:9D:94:BC:99:F3:4C:4B:92
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/630b72c1-ddbd-44cd-9dc8-1206adf63d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:cc:65:37:b0:35:92:5e:9f:d3:1d:97:c1:4a:5e:ea:3b:99:
         50:09:d6:4a:0d:07:de:bb:3e:61:55:50:3f:fb:88:be:ff:cd:
         4c:cb:0a:b0:bc:24:aa:18:c5:f4:6f:e7:62:fb:17:4e:19:f1:
         04:26:44:79:d7:95:5d:0e:e4:05:1c:04:d0:34:20:ad:7b:dc:
         e7:5a:94:4e:f7:a5:90:25:da:57:77:cc:92:fb:4e:d3:2b:45:
         a3:19:77:c0:43:6d:0d:d5:54:8f:48:3e:f3:91:2e:b4:f1:e3:
         f5:b6:7d:de:89:ad:d3:35:a3:75:f3:77:fe:4f:88:a5:01:9f:
         e8:0c:33:e4:eb:5f:b8:de:e3:2b:5f:b0:bd:de:df:1f:4e:81:
         6b:0c:22:85:11:6a:f5:9e:ae:76:a5:3e:d2:38:71:7b:d9:3f:
         db:97:79:47:b2:6b:f1:ad:03:f2:a7:a2:85:4e:e8:67:03:f1:
         4e:5a:44:d3:b8:7c:0b:09:53:da:6b:26:7b:ef:43:2a:07:56:
         05:95:98:e2:1e:9b:15:34:f4:1b:ce:21:f3:ad:20:fe:ad:2c:
         b0:09:90:93:0b:6f:1e:0f:0c:3b:80:24:cf:80:47:19:91:80:
         94:84:e5:df:05:ba:dc:d3:d0:3f:43:26:3c:9c:9f:c4:83:8e:
         e8:28:9e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----