This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7e555215-5461-465c-8c50-936e281a1a4c.roa
File:                     7e555215-5461-465c-8c50-936e281a1a4c.roa (raw, json)
Hash identifier:          C9gp/dOk7pKaNNS3KOCHb67x9cjbTUqTJNWnpLS3f34=
Subject key identifier:   4E:0F:81:3E:F9:C3:7E:8B:9C:27:D5:74:0A:A7:2D:78:55:E5:42:32
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       77A9E28430400C9C337EAD1B9083939BE4A0A2F0
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7e555215-5461-465c-8c50-936e281a1a4c.roa
Signing time:             Fri 19 Jan 2024 00:00:00 +0000
ROA not before:           Fri 19 Jan 2024 00:00:00 +0000
ROA not after:            Fri 23 Feb 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a9:e2:84:30:40:0c:9c:33:7e:ad:1b:90:83:93:9b:e4:a0:a2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jan 19 00:00:00 2024 GMT
            Not After : Feb 23 23:59:59 2024 GMT
        Subject: serialNumber=59bfda5f8ab3a3ee99529b199b0a4c50fa0d079194a11803031f50a3209ebc62, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:e9:7e:66:af:c4:62:da:b1:d7:be:15:03:
                    77:1d:72:97:08:b4:12:f4:b3:af:ab:fe:b3:7a:f7:
                    68:1e:50:45:cc:84:a1:5c:f7:b0:6a:da:72:c7:e5:
                    63:29:51:d9:31:5f:39:f3:88:52:bd:3c:8f:a0:ac:
                    7a:3b:8a:02:9c:b4:17:8c:e2:ee:ad:52:2c:44:5d:
                    22:58:93:96:d1:bb:94:07:cc:95:0d:46:56:b8:b5:
                    3c:f2:fa:42:45:5b:f2:c7:50:62:ec:32:b5:12:ac:
                    98:6a:64:20:93:ae:46:ae:86:d6:6d:a5:77:5d:ff:
                    f3:46:0e:6d:2b:eb:0f:d8:27:e8:9e:a4:07:77:d8:
                    e9:37:e5:f9:98:fe:3c:44:b1:4b:b1:c4:9b:50:db:
                    01:2b:26:8f:0b:18:c2:e7:91:36:6a:ba:cc:04:d3:
                    e7:bc:aa:97:2a:27:8b:78:a7:07:b0:8c:f5:72:f7:
                    2a:2a:03:0e:27:55:cc:ba:93:3e:d7:ce:05:dc:e8:
                    06:7a:2a:cc:af:15:50:dd:5c:d9:73:c4:69:bb:84:
                    f0:1d:98:aa:e1:0c:3b:81:f9:bb:5e:8c:c0:81:63:
                    23:93:ed:4e:b1:70:e5:79:1b:98:04:2a:ee:ea:a8:
                    9a:26:1f:d5:54:e9:d0:c0:90:af:55:01:f1:8d:0c:
                    b4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0F:81:3E:F9:C3:7E:8B:9C:27:D5:74:0A:A7:2D:78:55:E5:42:32
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/7e555215-5461-465c-8c50-936e281a1a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:30:f4:ab:07:f6:c3:6b:fa:95:a6:74:53:9f:49:40:12:b3:
         c2:19:e3:1c:39:0b:b8:42:86:b3:f0:68:0f:07:0c:c8:7f:df:
         af:ad:46:78:10:cb:d8:7c:c3:b8:c2:83:a4:7a:cf:5d:1f:39:
         a3:4d:ae:48:d3:ad:a9:97:a1:14:0b:c0:fa:7f:77:08:28:38:
         28:6a:23:18:f8:3d:0f:d3:c2:8e:82:18:09:dc:f4:8b:5d:9b:
         a2:81:af:96:bc:b2:27:0a:21:8a:e7:44:29:a5:78:3f:4a:cc:
         f4:31:18:d6:8a:30:c6:c3:3e:d2:76:c0:a0:b4:ef:0d:95:1e:
         5c:ef:3a:19:67:ca:9d:6b:aa:f6:47:92:46:dc:06:1e:87:f2:
         74:30:d0:fd:60:d8:e1:e3:72:a6:20:7e:1c:fa:82:97:b2:94:
         dd:75:58:1e:98:09:22:e3:a4:86:c3:2a:e5:c2:28:ca:56:0d:
         49:6c:9d:a1:1c:d8:0f:d7:e3:a2:13:13:92:13:69:3a:c7:db:
         21:e4:bf:f1:0b:de:10:c4:84:e4:84:d2:97:72:cf:5a:af:bf:
         42:8a:2f:99:a9:4e:22:24:e9:0b:5a:50:30:d1:cb:ad:4c:27:
         65:02:d1:68:9f:3d:07:40:a0:a1:1f:a7:65:28:b2:81:20:97:
         c7:0e:19:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----