This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78d98d3e-4ba2-467d-935d-74f21efce329.roa
File:                     78d98d3e-4ba2-467d-935d-74f21efce329.roa (raw, json)
Hash identifier:          pMprasapX5zbWEtVes66Z48qECxiybO0Krs3pYBJDN8=
Subject key identifier:   BC:C2:40:B2:C4:3C:E4:17:3D:42:17:33:B6:CD:01:0D:2E:A1:76:16
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6D21090AF8DBD311E8C5F37A1001DB520114DF43
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78d98d3e-4ba2-467d-935d-74f21efce329.roa
Signing time:             Mon 28 Apr 2025 02:38:28 +0000
ROA not before:           Mon 28 Apr 2025 02:38:28 +0000
ROA not after:            Mon 02 Jun 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:21:09:0a:f8:db:d3:11:e8:c5:f3:7a:10:01:db:52:01:14:df:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 28 02:38:28 2025 GMT
            Not After : Jun  2 23:59:59 2025 GMT
        Subject: serialNumber=cf1dfb29322d324562ed23592deb7148aaffbe9c959c1794fbeb91deb994b1be, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3a:f2:dd:8f:3e:16:2c:04:60:36:4e:15:e2:
                    69:1e:3f:73:d8:a0:ea:74:87:bf:38:f1:f5:29:b3:
                    03:56:21:a2:7f:e5:47:3d:b5:6c:7e:7e:c2:c7:bd:
                    af:42:7d:ee:cf:a6:c3:db:bc:bc:31:70:77:a9:08:
                    ff:c2:67:32:2b:a0:6b:68:d3:66:d3:64:a1:63:f1:
                    3b:0e:9b:38:5e:7f:7a:b5:ce:09:8e:fb:7a:6f:23:
                    f2:e1:28:fe:48:f3:74:31:14:2a:7c:ba:07:be:7f:
                    a5:41:6b:7c:87:f4:48:5c:aa:98:7d:d2:29:b5:07:
                    89:2d:a6:27:7e:de:0c:59:c0:0c:ab:be:5e:54:de:
                    32:76:82:54:6e:27:7d:d9:7f:64:30:4b:ff:62:de:
                    62:4d:9d:47:f7:1b:5e:df:42:1a:6f:4b:45:d3:96:
                    62:b1:2f:35:9f:11:01:57:07:6f:07:f8:21:9a:57:
                    9d:4f:a8:fe:d2:99:61:08:91:da:55:76:fa:03:77:
                    b6:dc:58:4a:c4:40:8e:29:d3:fe:c3:7a:f6:98:bd:
                    2b:27:41:2b:4c:86:f2:e9:d7:69:2a:3d:e7:59:35:
                    86:0a:f5:1e:56:67:3f:d2:c0:e6:96:45:00:4c:b5:
                    7e:52:35:b0:fe:f9:f4:84:4b:b4:b8:06:c9:af:57:
                    09:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C2:40:B2:C4:3C:E4:17:3D:42:17:33:B6:CD:01:0D:2E:A1:76:16
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/78d98d3e-4ba2-467d-935d-74f21efce329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:83:27:ff:35:65:08:e2:dc:66:51:e8:0e:b8:05:21:53:18:
         8c:14:93:b8:79:70:57:4c:67:7a:e6:f2:5a:01:4b:fe:72:4f:
         e2:21:ce:65:3b:09:ba:f4:f1:50:30:f9:2d:07:2c:ce:b3:d2:
         14:c4:64:17:4a:5b:34:fd:e5:5f:fc:f5:92:af:3b:40:8b:0b:
         0d:37:1e:93:5a:82:d8:de:17:f7:60:a7:52:22:cf:95:46:51:
         76:9e:23:e1:90:1d:87:f4:3c:aa:74:0d:a9:e7:cc:69:8b:10:
         e4:7a:00:d7:b9:ce:e0:5d:90:42:32:7d:e5:d3:97:98:1f:24:
         9a:1f:00:41:fa:3a:f4:9a:5d:eb:07:af:a5:e3:d4:9b:30:88:
         90:5f:98:87:03:49:20:b9:96:f4:fb:35:5f:8b:d5:15:fd:72:
         12:e0:e8:f1:a9:ee:c4:5d:63:97:77:03:7f:77:89:0d:e2:6f:
         b9:7d:e5:ce:8b:9c:64:23:62:53:be:a6:b2:01:56:d4:b7:55:
         6e:93:13:87:00:21:82:75:03:a8:2c:cc:a8:93:b3:2b:ea:13:
         d6:48:80:05:32:46:91:ec:f9:4e:85:db:63:23:bb:c7:57:10:
         a7:c7:db:5b:ff:e9:f9:8b:ce:de:bc:63:3d:d3:d1:b3:8c:4c:
         76:ab:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----