This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c360370-d0aa-4e48-bab4-1cadf396db3d.roa
File:                     6c360370-d0aa-4e48-bab4-1cadf396db3d.roa (raw, json)
Hash identifier:          MlsJBniCzXq+H4fmk9nECsC0C8WbPkq5LoV2eEXhqas=
Subject key identifier:   67:AD:5D:52:73:B5:4A:9A:0D:D5:E1:50:AF:D8:87:53:CB:87:55:36
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4D1C5FE21E96BB414062E2C8B8546BF15A2BB5F1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c360370-d0aa-4e48-bab4-1cadf396db3d.roa
Signing time:             Sat 22 Feb 2025 20:08:22 +0000
ROA not before:           Sat 22 Feb 2025 20:08:22 +0000
ROA not after:            Sat 29 Mar 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1c:5f:e2:1e:96:bb:41:40:62:e2:c8:b8:54:6b:f1:5a:2b:b5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb 22 20:08:22 2025 GMT
            Not After : Mar 29 23:59:59 2025 GMT
        Subject: serialNumber=8a95e69a6cbb28ad13da186881322b7b3ef6610a90ece9e491a8bc9aae5a4910, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:bb:3f:b9:88:1e:4f:81:03:56:87:0b:ee:
                    42:dd:b2:ce:2d:3c:f4:f7:0b:09:1c:a0:df:41:01:
                    49:e1:ce:7f:7f:6f:b7:d7:7c:a8:88:42:f9:5a:f4:
                    5d:d6:e9:de:a4:7c:59:ea:c6:07:ee:51:d9:18:ae:
                    1f:63:8b:b6:fb:62:3f:dc:b1:17:af:81:a1:0e:0a:
                    26:6f:e6:00:b7:09:08:20:45:0e:b8:5b:9b:ba:8a:
                    9f:bd:67:fe:68:43:0e:c5:a8:30:48:86:4a:4b:a8:
                    d6:43:25:5a:a3:e6:f7:13:b9:99:85:79:b9:c1:4e:
                    86:49:fa:31:d7:53:72:ac:4b:0a:dc:6f:17:3b:76:
                    d6:eb:96:38:4c:38:d9:3b:a6:1e:16:1b:6a:d6:17:
                    76:b1:47:a0:f6:45:86:87:51:6e:ea:9a:1a:f7:8c:
                    d6:fd:ed:95:8c:b8:db:02:66:ac:7d:25:da:2e:4f:
                    dc:94:65:04:3e:bb:90:12:e1:48:50:3c:37:87:00:
                    25:84:af:9c:c0:09:6d:e3:df:df:7b:53:4a:7b:0b:
                    f7:96:5e:42:98:41:52:0e:14:d5:91:f7:dc:ba:79:
                    86:4e:42:bc:6e:c3:65:e7:3d:e9:a5:c8:66:92:5e:
                    77:2b:48:fc:57:0f:dd:b2:9d:23:43:37:27:16:01:
                    e9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AD:5D:52:73:B5:4A:9A:0D:D5:E1:50:AF:D8:87:53:CB:87:55:36
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6c360370-d0aa-4e48-bab4-1cadf396db3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:3a:36:6d:00:82:b6:d9:55:da:31:be:8f:c4:05:e7:e9:41:
         68:e1:1a:cf:2a:1a:9c:7f:e6:9f:5d:25:b7:40:be:7c:80:3e:
         c0:d7:9a:04:b6:7b:76:c2:32:12:ce:b1:d9:7a:df:a3:ba:cd:
         5e:55:5e:99:82:be:6d:d5:78:c8:e5:a8:8b:8c:6a:79:58:bf:
         06:e4:d2:3b:9a:89:b1:b9:b6:f4:bf:1a:46:54:ff:26:65:ee:
         be:40:c7:f8:ea:64:ad:19:b9:56:e9:18:8e:1c:60:25:26:15:
         d6:8e:37:22:0e:28:08:67:ea:e3:cb:30:4b:11:51:b2:0b:03:
         18:a4:7e:12:1f:3e:d4:d5:71:3a:60:88:ef:f1:99:00:12:21:
         cc:12:15:6e:5e:63:dc:0a:37:a0:8c:b6:aa:6a:65:df:b3:fc:
         04:61:97:43:46:f9:1a:33:fe:55:c3:9f:fb:52:a6:58:6e:80:
         9e:8d:4c:f8:02:fb:91:29:c1:58:c9:98:c4:b6:a3:cc:72:0c:
         d7:de:7d:21:70:42:d5:65:3d:e3:bb:c7:50:96:9a:7f:64:ac:
         34:76:be:a0:39:1a:c2:c7:b5:59:e6:0b:56:f0:f9:85:d2:1b:
         ea:c7:0c:78:45:b5:eb:b9:bb:4f:2c:e7:13:49:0a:7a:f0:ee:
         0e:8e:c7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----