This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/833ab1fe-0d44-46fb-8e6e-3b16828c348c.roa
File:                     833ab1fe-0d44-46fb-8e6e-3b16828c348c.roa (raw, json)
Hash identifier:          wmUQMGP0dZb0A//KUu3UR/4mVMygEzuQkQ6RxJ6GJRg=
Subject key identifier:   DF:D4:5E:E7:BA:36:34:C3:39:B8:01:07:F6:60:44:1A:4C:8A:50:41
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       36B313E1D8A0CFFEF4DC38F9A97B9F572C8295EF
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/833ab1fe-0d44-46fb-8e6e-3b16828c348c.roa
Signing time:             Tue 26 Nov 2024 00:00:00 +0000
ROA not before:           Tue 26 Nov 2024 00:00:00 +0000
ROA not after:            Tue 31 Dec 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b3:13:e1:d8:a0:cf:fe:f4:dc:38:f9:a9:7b:9f:57:2c:82:95:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 26 00:00:00 2024 GMT
            Not After : Dec 31 23:59:59 2024 GMT
        Subject: serialNumber=f7929cd66c753ade1eac8539dc987050036f7671456bdf9afe54bc2d9b013761, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:e6:e1:aa:f3:fa:05:0e:2c:f0:89:b9:26:
                    af:62:a8:9f:b0:60:59:56:ed:f8:bd:31:0d:06:cd:
                    22:7c:00:c4:02:b7:c8:a9:e0:57:60:2c:21:30:5b:
                    f7:d5:c2:7d:27:4e:f8:aa:96:c8:ef:bd:69:5b:40:
                    fb:df:48:60:70:4b:7e:ed:03:94:91:74:98:76:95:
                    9e:4a:06:91:c0:65:68:f4:87:2d:94:dd:79:c3:c6:
                    2e:dc:67:c7:cf:9b:bd:45:6d:af:8d:98:e3:ef:53:
                    2c:78:80:11:2a:75:2c:2b:1a:2f:dc:72:99:3c:77:
                    d6:fa:83:5b:cf:ac:a9:c0:dc:99:5b:6a:9d:0e:48:
                    65:c5:36:65:59:ef:40:b0:a8:88:90:04:43:e4:d0:
                    11:e0:bf:79:8a:6f:64:bb:19:18:ce:68:48:6c:c6:
                    f9:06:76:51:55:8e:bf:ef:09:6f:98:67:d2:a4:3b:
                    2e:d2:ba:70:a5:3e:80:5c:49:52:8a:5b:4c:fa:cc:
                    72:5e:0e:bd:09:a0:e4:76:c3:71:29:07:1b:19:e9:
                    c5:83:33:fb:ca:0b:e9:6f:ed:a0:6c:e8:92:83:b2:
                    20:1b:99:9e:fe:a4:bc:8b:1c:14:a9:48:c6:c8:bd:
                    97:1e:f3:c3:f3:80:5c:ed:24:d6:77:92:ed:3e:9f:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D4:5E:E7:BA:36:34:C3:39:B8:01:07:F6:60:44:1A:4C:8A:50:41
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/833ab1fe-0d44-46fb-8e6e-3b16828c348c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:82:8d:c3:9e:94:81:3e:21:03:4d:bf:ba:1e:6e:cb:8e:06:
         a2:40:80:33:f6:52:72:8c:bd:48:24:ed:a3:d9:04:2f:8f:b5:
         d2:5a:be:f4:33:3c:63:4c:ed:b2:cc:70:03:8e:db:38:4f:f1:
         08:14:bc:70:6b:bb:ba:0e:ed:61:46:67:ef:45:ac:08:f2:1e:
         c6:b5:03:ca:6d:57:d5:ac:51:21:ee:fa:b5:b4:7a:1c:9d:5f:
         59:86:70:8e:42:16:bd:25:85:7c:26:7e:49:cd:bb:10:43:c7:
         65:dc:e7:86:ad:37:9b:22:63:6d:47:16:76:f8:58:6d:46:3f:
         90:af:29:2c:52:39:a0:0e:cd:7c:91:fa:a1:b3:92:fb:dc:62:
         d5:a8:39:82:07:d5:dc:8a:bc:d5:f8:8d:54:84:8e:fe:b5:92:
         bf:b9:ef:2e:92:cc:4c:33:ba:df:45:29:17:3f:2c:79:ff:81:
         7d:72:34:c5:50:1b:59:62:53:81:54:64:f0:b7:42:3b:ef:2e:
         64:63:43:ee:54:67:09:87:4e:14:b2:82:5c:19:6c:bd:e6:de:
         fe:5d:ef:17:36:c4:17:9e:83:a7:ee:b9:bd:fc:9e:cc:2a:eb:
         c2:9d:56:6b:15:86:9e:87:d6:53:c1:fc:8c:73:91:f5:61:79:
         45:5d:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----