This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/652c5d41-506e-4466-bcab-8fe02201be81.roa
File:                     652c5d41-506e-4466-bcab-8fe02201be81.roa (raw, json)
Hash identifier:          4U64DsCwkhGq3QlDerUMFvDJ/eyux1TiIto+nYShAPo=
Subject key identifier:   C7:F0:5A:80:BB:1D:91:57:A1:FB:6D:1A:01:E8:45:CA:B7:AD:9A:79
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       01768828C02F5D02C49D29F398FFF64F94644FB9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/652c5d41-506e-4466-bcab-8fe02201be81.roa
Signing time:             Thu 22 Feb 2024 00:00:00 +0000
ROA not before:           Thu 22 Feb 2024 00:00:00 +0000
ROA not after:            Thu 28 Mar 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:76:88:28:c0:2f:5d:02:c4:9d:29:f3:98:ff:f6:4f:94:64:4f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb 22 00:00:00 2024 GMT
            Not After : Mar 28 23:59:59 2024 GMT
        Subject: serialNumber=84fe977cd7a7cfa481ff585962fc5c21eecd7de2691f61b338a649403becb44f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f2:40:29:3d:fb:b6:30:cc:6a:cd:97:5c:22:
                    e1:ef:1a:b6:40:52:ba:21:c4:c2:5d:d0:de:fc:5e:
                    ac:b3:6e:ef:59:1b:3c:a8:81:13:a6:24:a5:94:b7:
                    15:5a:82:b7:ec:99:f9:12:82:a9:bb:31:b7:41:b9:
                    00:40:89:48:86:9f:9f:fd:38:b1:fd:ac:e9:00:d9:
                    fd:4e:0c:b7:6a:0b:c3:80:37:20:f1:04:31:e9:7d:
                    e6:48:91:65:18:6a:26:65:1f:46:62:13:dc:fb:31:
                    af:b4:7f:f0:de:b8:4e:dc:f7:80:bd:44:f0:13:64:
                    40:d7:3c:e7:4d:45:b4:c1:0b:27:e4:ef:2f:ce:b4:
                    14:16:ea:16:35:70:83:95:be:38:15:6a:77:1d:11:
                    3e:62:79:8a:58:fe:41:89:07:8e:74:34:6f:ab:27:
                    fe:d3:85:ce:19:76:14:9e:73:34:5e:ac:9f:19:43:
                    8b:23:4c:63:58:bd:f8:46:3e:db:f2:fe:47:41:00:
                    47:21:25:c9:ec:4c:28:34:b6:16:5c:8c:d4:6c:0c:
                    7b:15:0b:19:59:85:87:fe:2c:fa:67:a3:f0:a5:41:
                    e1:45:ac:d4:66:99:c7:f1:dd:da:50:fc:86:f8:48:
                    78:c5:3a:3c:f9:d5:4c:7c:88:61:44:c0:6d:50:f9:
                    3c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F0:5A:80:BB:1D:91:57:A1:FB:6D:1A:01:E8:45:CA:B7:AD:9A:79
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/652c5d41-506e-4466-bcab-8fe02201be81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:89:13:06:0c:d6:34:ea:2b:85:96:2a:4a:a6:6a:45:7e:4b:
         cc:c5:8f:6e:29:ea:35:7a:96:f5:90:0f:6a:76:06:1c:e4:cf:
         40:71:03:7b:6e:0f:35:6a:fd:b3:7d:63:ad:ca:e0:fe:98:dd:
         90:e6:02:7d:84:00:c1:2d:a2:f4:8e:d5:22:d7:91:7c:a2:34:
         89:60:12:27:d5:de:da:8a:d1:90:7f:9f:1a:4f:3b:86:e7:09:
         02:49:44:e7:a8:f3:fd:ff:b3:27:d6:4d:47:fd:71:a2:4a:fb:
         86:2d:5f:54:b3:98:ed:b8:ce:a2:d2:36:7d:f2:64:e2:08:6f:
         ff:0a:90:32:6f:4c:ed:9f:8d:0a:3f:12:22:fe:4d:f5:44:dd:
         bc:d2:f2:e7:86:93:53:22:39:03:80:e6:20:d3:4f:2b:dc:d6:
         18:a4:e1:a9:12:c1:e8:ca:e5:4b:2b:ff:41:a4:dd:e3:5c:bc:
         54:6d:21:5c:49:c8:4e:e2:bf:0c:1e:05:fa:14:1e:11:8c:1b:
         c4:40:bf:83:8a:c8:50:16:74:a7:fd:7d:c5:f0:3a:ef:77:5a:
         e3:eb:d1:2d:f8:b1:da:bb:87:98:96:69:0b:d0:7b:4d:cb:ef:
         03:93:c1:80:de:a0:6e:bc:b5:44:e9:e1:5a:1b:69:c6:d4:ae:
         4e:51:10:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----