This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d3e8fb0-52e2-44fd-ab82-1b49d61a56c3.roa
File:                     6d3e8fb0-52e2-44fd-ab82-1b49d61a56c3.roa (raw, json)
Hash identifier:          UZFAcSwytmCpHAuDwGbYsL2mJS3svIwhKfQK1AIBrsc=
Subject key identifier:   9E:98:A3:ED:E0:28:AE:0D:99:A1:D2:72:97:43:BE:8F:E2:50:E8:9E
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5F010870F401E1B50AC4D982CE1AFF426C953339
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d3e8fb0-52e2-44fd-ab82-1b49d61a56c3.roa
Signing time:             Tue 29 Apr 2025 20:53:18 +0000
ROA not before:           Tue 29 Apr 2025 20:53:18 +0000
ROA not after:            Tue 03 Jun 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:01:08:70:f4:01:e1:b5:0a:c4:d9:82:ce:1a:ff:42:6c:95:33:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 29 20:53:18 2025 GMT
            Not After : Jun  3 23:59:59 2025 GMT
        Subject: serialNumber=d48ac5eb5d22b70e784e0a57a1d7f4156968621fa38c1fb3d2034693d5275ae7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:32:d2:20:d9:87:92:3f:8e:1f:9e:36:f0:
                    14:6e:de:e6:51:83:71:e8:c5:21:7e:16:eb:a2:88:
                    cd:81:03:75:50:05:1b:7c:83:58:aa:60:3a:9c:ef:
                    84:9e:d7:6c:11:1b:34:99:da:7e:42:79:5f:d2:e7:
                    a4:a0:4f:d1:3b:85:97:fe:49:42:32:ab:a0:86:94:
                    55:48:19:43:f7:1c:24:2c:63:e9:a8:d4:68:13:b3:
                    bd:3d:b3:19:7f:fb:d0:d6:fb:af:ff:74:08:c3:71:
                    dd:cc:78:b0:da:d7:11:c3:80:e5:54:97:14:37:0a:
                    88:c6:cd:3c:0f:fa:e7:80:aa:fc:7e:86:77:9c:2e:
                    f4:70:03:eb:b8:94:b5:82:96:ea:16:a7:4d:d9:f1:
                    1e:a3:eb:e7:4a:ef:ec:57:bb:01:a8:a7:e7:9c:c8:
                    cf:45:4a:2a:0b:6b:c0:fb:13:09:c8:2f:3d:a0:7b:
                    8c:fe:4a:b0:3b:29:03:8c:cc:b0:88:47:f8:96:42:
                    e4:2e:a1:e7:ef:66:5f:81:97:14:b1:0a:de:b2:f6:
                    27:44:c7:c9:e1:61:9e:18:1e:27:5d:6e:a2:0d:8a:
                    af:bb:8d:81:e6:1a:ed:e7:33:ef:c8:40:5f:ca:de:
                    76:67:65:60:76:ec:53:69:3f:52:ad:08:89:05:f2:
                    98:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:98:A3:ED:E0:28:AE:0D:99:A1:D2:72:97:43:BE:8F:E2:50:E8:9E
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/6d3e8fb0-52e2-44fd-ab82-1b49d61a56c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:29:79:c9:92:43:15:b9:95:52:8b:0f:de:8e:de:d8:c8:d2:
         e9:86:e3:df:90:df:7d:44:28:30:df:0f:5a:f0:e9:51:b6:a3:
         f4:31:e2:30:4f:6a:e1:e0:a1:93:39:91:e0:88:ef:da:f5:dc:
         99:75:ea:d7:48:3f:25:13:5a:d8:45:8c:4f:5c:54:d8:5c:82:
         61:1e:89:ab:84:97:3a:16:57:7f:b5:07:f0:ca:a5:6a:25:a5:
         5d:b7:ec:00:1e:74:bd:19:e2:3f:5c:b5:80:f6:87:b2:4e:5e:
         17:56:0a:2c:cc:65:c7:09:3b:f5:c0:cf:64:5e:81:5e:05:c9:
         9d:1e:c6:04:48:d5:7d:d3:21:ba:1d:41:9f:33:f8:22:77:bd:
         44:8c:b6:87:d3:a4:de:16:c8:ae:b1:05:c7:88:33:48:65:96:
         7a:8e:19:85:d8:dd:01:28:88:03:b8:d0:54:37:23:5b:3c:23:
         3f:d0:d0:5c:d6:0c:48:bd:73:be:c3:a2:5b:db:f0:82:31:85:
         0e:20:87:b9:6e:33:1c:67:30:be:85:94:7d:0f:ec:f9:4e:a3:
         da:9f:04:f8:af:9d:d4:75:1c:37:31:65:6d:c4:af:4d:4e:38:
         dc:f5:20:6c:cc:bb:ab:1a:50:4e:37:81:7d:54:b6:ba:ec:33:
         5e:1f:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----