This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8cbfe82f-3d8c-44ae-8dc1-8d62a7a83d77.roa
File:                     8cbfe82f-3d8c-44ae-8dc1-8d62a7a83d77.roa (raw, json)
Hash identifier:          PIY2IZFjSRuozOA/iTfLpWs2qy++AlJB+BMHr6gJeBQ=
Subject key identifier:   09:EE:9C:4C:0B:B4:8E:C1:FC:37:27:BA:1C:24:81:77:AB:99:F1:36
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2A87C39FF259E740F30F3D6EBA186DD42121CFFC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8cbfe82f-3d8c-44ae-8dc1-8d62a7a83d77.roa
Signing time:             Mon 01 Apr 2024 00:00:00 +0000
ROA not before:           Mon 01 Apr 2024 00:00:00 +0000
ROA not after:            Mon 06 May 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:87:c3:9f:f2:59:e7:40:f3:0f:3d:6e:ba:18:6d:d4:21:21:cf:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr  1 00:00:00 2024 GMT
            Not After : May  6 23:59:59 2024 GMT
        Subject: serialNumber=ae8fd466693128a1421afa9745eacde50e32d043950e39a64b29810bcf3b1121, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:a5:73:00:0e:21:06:a8:59:04:36:36:c9:
                    50:03:13:8f:02:b3:c2:0d:5b:1d:ae:f1:52:bb:71:
                    d4:27:61:11:1b:76:4e:dd:72:6c:72:67:ae:c3:f4:
                    08:5b:46:79:29:5b:12:26:68:83:ca:d4:d4:41:96:
                    c4:a4:2c:7e:02:f9:cb:64:23:21:a8:22:32:3f:ff:
                    b3:12:22:14:47:21:48:78:bb:0e:fa:a0:5a:cd:35:
                    38:12:b6:b1:2b:8d:a9:8b:4d:e7:45:6a:3c:3f:84:
                    5d:40:72:48:2c:49:46:4b:b3:b7:a5:49:17:2e:53:
                    19:dc:76:44:1d:2f:08:5d:49:56:9d:f4:76:5c:ce:
                    33:93:72:9c:17:2e:19:8b:27:fe:7c:e4:85:dc:77:
                    d1:ab:45:a4:61:9d:28:5c:71:c1:91:20:36:f6:5b:
                    04:9b:4f:24:62:48:bf:17:46:d7:f7:09:3d:18:4a:
                    cd:60:02:9f:14:e2:c7:f1:ba:04:37:1f:55:94:0d:
                    4c:8a:67:be:f0:19:09:ca:51:d0:5a:fa:f7:1e:58:
                    86:08:07:0b:fd:29:f8:ed:30:c1:50:55:7e:46:41:
                    b5:83:1c:b3:01:94:0a:27:53:22:a9:6d:2a:3f:f2:
                    c6:6f:ff:40:ae:3c:b3:2d:39:c4:83:26:8e:e5:39:
                    56:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EE:9C:4C:0B:B4:8E:C1:FC:37:27:BA:1C:24:81:77:AB:99:F1:36
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8cbfe82f-3d8c-44ae-8dc1-8d62a7a83d77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:97:b6:9c:04:b8:bf:db:7f:52:ec:70:a8:ec:95:0b:d8:21:
         41:2c:90:1d:b5:10:0e:4f:11:2a:0d:9b:1a:86:cc:26:82:75:
         c4:09:66:32:88:4b:0a:21:97:df:97:72:52:1a:2a:61:57:6e:
         6d:89:7f:01:99:ad:53:fe:38:14:8e:25:fc:ce:2b:18:0b:35:
         1a:41:f1:01:47:6b:52:82:36:8a:d5:ab:c5:b4:d4:b4:a9:24:
         1c:55:a0:2a:6f:36:5a:68:cb:34:e3:5b:8c:ab:64:5f:25:cb:
         99:85:d5:6d:9e:d4:97:f9:a9:5d:2f:16:6b:67:cb:5d:1f:cb:
         71:4e:77:bf:4a:4f:49:2d:d2:28:74:bb:e1:a0:6a:f0:62:06:
         9c:05:fd:6f:d2:9f:1f:69:1b:b0:52:f1:a4:11:68:7a:87:46:
         35:08:59:ef:92:5f:60:e3:3d:88:b8:6f:39:67:2a:88:c6:8d:
         ab:e3:6c:bc:c8:ff:4a:b7:f0:3d:56:48:d9:50:6c:71:18:0e:
         88:b0:9d:fd:e4:16:ed:04:54:fc:5e:ac:05:12:c6:5f:39:3d:
         8a:91:59:62:60:93:0f:a9:08:30:53:39:53:54:21:ba:96:25:
         d5:71:f1:4c:e2:dd:eb:8e:64:a6:93:3b:49:9a:13:92:89:1e:
         26:85:5c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----