This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d2e2110-dbfc-4a69-9495-af564fd45fc5.roa
File:                     6d2e2110-dbfc-4a69-9495-af564fd45fc5.roa (raw, json)
Hash identifier:          GygOMirmoThdsWKNEQXswhi5XZFyy2XAPYo2vDZrjcI=
Subject key identifier:   3D:B3:1C:DB:22:67:B1:F4:41:D3:E9:E2:05:DB:C7:7A:6E:CC:2B:7F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       492A880F1BE1BE9A2C0E0B60B4DDFB0453D9D831
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d2e2110-dbfc-4a69-9495-af564fd45fc5.roa
Signing time:             Sun 20 Aug 2023 00:00:00 +0000
ROA not before:           Sun 20 Aug 2023 00:00:00 +0000
ROA not after:            Sun 24 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2a:88:0f:1b:e1:be:9a:2c:0e:0b:60:b4:dd:fb:04:53:d9:d8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 20 00:00:00 2023 GMT
            Not After : Sep 24 23:59:59 2023 GMT
        Subject: serialNumber=0bdf287ff3e068460bbcc2c32b24c410242e06c0b869778a49dea18646c773cf, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fd:5e:1a:a5:d6:b0:5c:2b:d9:59:29:97:96:
                    ea:6f:6c:28:68:a8:e4:d2:18:fd:ed:c7:c1:5e:1f:
                    9a:c9:61:56:1f:78:99:28:0d:19:8e:3c:3c:10:21:
                    ff:b4:23:8b:b9:3f:dd:7f:3a:97:3b:34:0a:bf:58:
                    a9:8a:79:e7:8a:8e:ca:9f:bb:47:e0:7e:e7:af:2e:
                    93:57:2e:ab:3b:ee:7e:f6:5b:8e:37:56:4c:8e:66:
                    6c:e1:f2:6d:fc:82:ac:6b:17:d5:1c:e1:1e:e5:89:
                    94:a6:08:a3:05:d8:9f:d6:07:a7:dd:05:ac:22:0e:
                    30:1d:cd:60:e8:51:82:f1:a6:14:c0:4d:40:3d:db:
                    d8:85:e4:02:6a:31:96:df:d6:3b:57:bc:19:9b:78:
                    35:1e:bb:3f:d4:1f:6d:49:14:0e:ac:8c:8c:78:16:
                    e1:e0:95:33:ce:5c:9f:35:23:f6:6e:3f:31:40:07:
                    0f:66:d5:bd:8e:72:6d:14:a5:01:d8:5d:5f:69:f0:
                    d7:f5:c2:b4:0a:db:b8:0f:bf:bc:5e:38:d6:2d:05:
                    94:bb:1d:13:c6:21:b8:7c:e8:b1:3a:e9:48:3d:d4:
                    c7:74:a7:2d:cc:a1:b8:f8:5b:de:36:dc:81:5c:b4:
                    7e:b9:15:d8:74:11:d5:2b:63:c2:c6:b5:ba:41:71:
                    f3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B3:1C:DB:22:67:B1:F4:41:D3:E9:E2:05:DB:C7:7A:6E:CC:2B:7F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d2e2110-dbfc-4a69-9495-af564fd45fc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:73:e5:ad:85:d2:93:fc:ae:54:eb:36:46:f5:27:b1:91:c7:
         fc:b0:08:cb:bc:f6:12:6e:23:c6:d0:c2:e1:1f:9a:9e:c9:98:
         67:bf:60:43:aa:c6:ce:e6:4a:01:57:58:39:df:5a:65:e8:a9:
         39:a0:0c:6c:91:c0:72:77:16:45:c2:c9:7b:47:f9:e9:57:59:
         30:f1:4a:35:14:97:86:eb:0f:ff:25:ad:4e:03:0a:28:aa:71:
         49:98:31:86:06:10:45:9a:55:35:d2:a0:44:a4:d0:d0:3a:dc:
         30:11:8e:16:c0:7b:9d:db:20:9a:69:be:d7:8b:9c:01:af:a2:
         a8:f3:97:ee:5e:3a:5d:82:d6:ce:65:29:09:c9:1e:6b:88:8b:
         3d:f3:24:54:64:cd:f4:0b:82:1d:ad:f4:01:33:0c:e1:23:5e:
         c3:0c:af:b7:71:5f:80:0f:14:24:ce:26:87:45:8d:53:55:82:
         ab:45:f5:ed:52:b2:c0:f2:e7:df:93:3b:05:9f:9e:83:41:0b:
         72:fd:20:6f:13:54:04:10:95:72:12:b6:c3:7f:9a:da:b3:30:
         d8:01:6b:7b:2b:8e:a9:9c:8b:79:a2:fb:34:b6:d0:a0:32:5c:
         d9:7f:2c:83:25:c5:00:65:fe:e1:2f:62:a5:01:9d:c0:bd:98:
         a8:02:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----