This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83d9464d-26eb-4693-834a-d2098d37b069.roa
File:                     83d9464d-26eb-4693-834a-d2098d37b069.roa (raw, json)
Hash identifier:          tpAwQPwguBcH6XTuM9EmknYsQDYh6U1ApgeyARg3zkU=
Subject key identifier:   D5:59:20:BA:84:EE:F2:13:D4:BD:47:8D:26:5D:0D:28:52:9F:A3:1A
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5202A8272232FCFF51A7E68DA9CBE299F2FFE600
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83d9464d-26eb-4693-834a-d2098d37b069.roa
Signing time:             Mon 10 Jul 2023 00:00:00 +0000
ROA not before:           Mon 10 Jul 2023 00:00:00 +0000
ROA not after:            Mon 14 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:02:a8:27:22:32:fc:ff:51:a7:e6:8d:a9:cb:e2:99:f2:ff:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 10 00:00:00 2023 GMT
            Not After : Aug 14 23:59:59 2023 GMT
        Subject: serialNumber=c73835e404d6cfefd08c64b64a99cdfb616ec651c9ebb38d91a8c78eb37716fc, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:98:be:cb:38:1e:45:33:05:48:d8:a9:b3:05:
                    07:f5:89:b8:77:4c:4d:bf:c2:74:1e:76:cc:2c:1d:
                    f2:87:d6:55:c8:76:60:b7:5e:65:55:60:bc:4f:32:
                    1c:77:28:0f:c3:5f:a8:3d:71:d0:e7:ba:f9:ab:22:
                    b6:ea:ed:73:86:62:91:ae:4b:10:60:ee:fa:c1:d3:
                    a9:f8:d5:1e:33:06:6a:11:98:f7:c6:37:08:9d:0a:
                    a9:4a:23:94:7c:e2:77:e6:8c:43:9f:29:5d:44:29:
                    50:ff:ce:b4:43:84:5b:95:86:ca:6c:60:c5:96:4d:
                    e3:c9:d6:52:4d:0e:7c:f0:70:89:75:76:27:11:dd:
                    d4:9d:7d:23:51:56:30:46:d5:c7:60:00:a8:dd:4f:
                    e4:4c:7f:27:ac:d1:b8:19:1e:55:b3:4c:4f:d9:38:
                    7e:67:46:a2:21:ae:49:05:a5:dd:65:b5:71:cb:fb:
                    e7:19:16:24:09:da:16:b8:53:11:1f:f6:db:e3:e5:
                    45:18:98:e4:e8:4a:f3:4a:15:b1:c3:cc:ff:11:8e:
                    2e:c7:d6:5d:02:1c:82:be:71:da:e3:93:42:7b:e7:
                    aa:95:41:c3:64:ef:af:18:e4:77:52:bf:4f:29:8c:
                    0d:df:01:96:06:4f:65:fd:92:5b:67:8e:d5:a1:f7:
                    32:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:59:20:BA:84:EE:F2:13:D4:BD:47:8D:26:5D:0D:28:52:9F:A3:1A
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/83d9464d-26eb-4693-834a-d2098d37b069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:de:49:fe:2f:c1:94:5d:5d:85:33:7e:93:9f:55:0e:f9:e1:
         3b:85:78:59:93:09:7c:07:45:5e:1e:b5:69:b2:b0:26:a2:3d:
         30:72:94:70:51:db:41:c4:cd:82:41:14:e3:e7:ea:a0:71:d2:
         fd:66:f2:6e:8f:de:5f:8b:e5:03:fc:92:6e:29:24:33:99:65:
         6f:bc:d4:7f:82:79:af:f1:a6:ce:44:6a:60:ea:3a:56:b8:45:
         d2:66:f4:ea:88:af:0a:10:97:14:c0:dc:29:62:06:7f:49:67:
         d7:f0:51:2f:06:83:96:76:ac:3f:75:f6:ae:42:9c:3a:02:1e:
         c4:16:8c:e6:4e:e1:2f:39:98:d9:67:77:97:9f:71:e9:9f:01:
         33:ef:d4:bc:41:2e:8f:a8:85:b6:c2:05:87:9c:df:a0:39:99:
         96:63:2b:bc:cb:7b:85:0a:40:44:7d:d5:3e:df:53:78:0e:f0:
         11:f8:24:38:47:4d:2d:d3:2a:fe:f8:de:08:ba:e0:3d:cb:6f:
         1f:d9:4f:43:d3:aa:be:17:ba:fe:49:00:55:c6:c7:43:66:ca:
         c3:1c:9b:d1:01:b2:89:1c:01:0b:e4:fe:e8:8f:3f:dd:00:5a:
         0c:d9:0c:77:07:5c:74:9e:16:e4:13:0c:74:d4:c4:3c:9c:ad:
         27:cd:a8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----