This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/99134f85-bdf1-4eea-ae78-72f3c74d61d0.roa
File:                     99134f85-bdf1-4eea-ae78-72f3c74d61d0.roa (raw, json)
Hash identifier:          GWoq0A/AWtUDF0GyEjtpjDF7ueWvrjAwYBNLml59QjE=
Subject key identifier:   94:F5:A4:FC:5C:6C:44:F2:45:E9:D9:9A:4C:86:37:04:D5:F2:75:E0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       0B5789D2D8492339E143A670AC8DD9D04A67FB8A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/99134f85-bdf1-4eea-ae78-72f3c74d61d0.roa
Signing time:             Wed 19 Mar 2025 16:48:18 +0000
ROA not before:           Wed 19 Mar 2025 16:48:18 +0000
ROA not after:            Wed 23 Apr 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:57:89:d2:d8:49:23:39:e1:43:a6:70:ac:8d:d9:d0:4a:67:fb:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 19 16:48:18 2025 GMT
            Not After : Apr 23 23:59:59 2025 GMT
        Subject: serialNumber=100fef7f816dfc8c43c24c8621e3d3027c835b8a0192cf5e1cc13f2e8a646169, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:42:ec:0a:92:38:91:1e:e2:dc:f3:53:d5:
                    41:b1:26:71:45:db:6d:d2:fb:8a:82:03:07:b6:a5:
                    01:93:25:96:75:4e:6a:9f:77:ad:21:fe:e8:f0:f5:
                    2c:44:f2:6c:16:ed:2b:8b:a7:be:05:cd:db:42:6e:
                    c4:e2:00:77:4f:87:26:27:db:8e:25:82:77:a0:e7:
                    7c:01:7e:46:85:e0:38:f4:b9:03:46:ab:44:e6:b4:
                    3e:fb:27:bb:11:1d:5c:39:f0:9d:a7:8b:3e:d0:2b:
                    73:42:e4:d7:31:d8:73:bc:ae:e3:fa:31:d9:b1:b9:
                    39:76:ad:48:bd:f1:4a:3e:d3:d1:4a:3f:90:b0:dc:
                    77:46:e1:05:80:18:9c:7a:dc:e5:2e:e9:14:c1:34:
                    e9:04:1d:51:d3:4f:a8:26:b6:fe:63:3a:a3:b8:67:
                    60:3e:66:16:74:69:b0:af:0c:b6:9e:1e:b5:0c:a2:
                    9a:6f:09:1b:1e:8b:f5:c9:59:08:bf:73:75:3f:1f:
                    a6:34:9a:07:76:ba:dd:0a:e2:bc:23:3f:1b:16:c2:
                    5e:c9:ad:22:72:f6:54:cb:8d:41:5c:2e:33:e9:ad:
                    85:2c:de:13:22:bb:47:c5:db:5c:c7:f4:c7:69:5e:
                    7b:37:cf:84:0d:48:ba:bf:56:6a:88:5c:a4:dd:c3:
                    42:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F5:A4:FC:5C:6C:44:F2:45:E9:D9:9A:4C:86:37:04:D5:F2:75:E0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/99134f85-bdf1-4eea-ae78-72f3c74d61d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:cf:fb:0d:ce:fa:fc:49:a9:d9:7a:a1:d0:8f:ac:1d:e6:8a:
         94:28:79:9e:66:2e:ad:94:53:cd:1b:ab:6d:73:d3:81:5e:b2:
         20:80:c2:09:5e:0e:39:88:aa:30:44:aa:98:7a:2b:ac:95:d1:
         c4:1d:b4:5f:26:f8:60:b0:1a:44:17:aa:bd:a5:aa:56:5a:16:
         79:a0:c7:5e:d3:80:00:f5:4d:e1:4c:76:37:04:3d:83:88:59:
         da:0d:d5:cc:d0:be:41:7c:7c:ed:b1:f9:94:18:0c:b5:5a:cb:
         b9:54:cb:af:cd:06:7e:39:bf:d8:da:d8:54:fb:38:38:54:f0:
         d3:8f:c8:67:6d:e1:35:b7:5c:c1:39:52:a9:8a:2b:03:ab:25:
         34:1e:02:d9:61:76:30:40:e8:2a:09:b9:11:e3:09:8d:16:cc:
         08:5e:6b:2d:3f:69:97:67:0d:d2:4d:e9:d3:b2:e3:07:74:9e:
         d3:86:85:ee:8d:90:80:ef:97:3f:67:54:e8:f8:f8:2e:2e:a2:
         f1:c4:9b:bc:04:b7:f2:04:07:7f:0c:af:89:da:99:9a:af:09:
         f8:e3:df:40:46:b0:66:c3:e1:5a:ec:69:e9:82:29:a3:d2:c5:
         73:0a:9a:a3:e3:dd:7b:36:03:ee:15:65:b7:db:d7:ee:c4:6c:
         c0:91:71:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----