This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e5fb684-f4b9-46f3-bda5-87fbe6cda5d2.roa
File:                     9e5fb684-f4b9-46f3-bda5-87fbe6cda5d2.roa (raw, json)
Hash identifier:          QvgQhK7nnrLLBqPTVDKvtoZ9MmT0QCGlVAYpTFFhDEk=
Subject key identifier:   6A:46:4B:19:3B:F7:D2:78:4D:1B:96:9A:63:79:8D:5E:76:18:1F:D8
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       45AF06C001B49B0F39081B75486784725201AD46
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e5fb684-f4b9-46f3-bda5-87fbe6cda5d2.roa
Signing time:             Sun 02 Feb 2025 00:00:00 +0000
ROA not before:           Sun 02 Feb 2025 00:00:00 +0000
ROA not after:            Sun 09 Mar 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:af:06:c0:01:b4:9b:0f:39:08:1b:75:48:67:84:72:52:01:ad:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb  2 00:00:00 2025 GMT
            Not After : Mar  9 23:59:59 2025 GMT
        Subject: serialNumber=fdd4fe850948d61172c4e5bcd4cd9441a3d037656ebea7924eba682d915893ae, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:e2:ce:83:d9:99:b9:20:9d:3f:30:c7:c3:
                    58:81:91:09:49:32:3a:d8:1e:80:93:9a:1e:d7:51:
                    25:7c:2e:82:05:5d:c4:a1:e1:76:91:0a:00:22:17:
                    d3:6d:74:95:96:dd:28:d4:a1:eb:67:40:af:a4:02:
                    5c:68:86:ca:6a:63:31:f4:87:7e:45:29:9c:f5:07:
                    24:32:77:d4:2a:38:97:dc:7d:2b:1f:6f:fe:d2:f2:
                    35:2e:d2:52:be:8e:0a:cf:f6:36:58:d7:3c:53:a5:
                    a1:fe:a4:0d:70:34:78:9f:e4:a6:53:6b:09:a6:61:
                    91:23:9b:49:2e:ad:c9:3c:8a:62:8b:f6:06:da:7b:
                    a2:4d:94:56:55:82:e4:3d:61:0b:55:d5:6e:4f:42:
                    40:46:e8:26:09:ca:1b:d6:e8:b5:4b:6f:bf:e1:26:
                    6e:e1:fa:12:5d:e4:56:f0:9f:7c:64:cf:a7:93:35:
                    e6:1a:f9:6f:44:e8:0d:00:d0:75:48:c9:c9:20:da:
                    5a:b3:7c:28:a3:14:17:9e:8f:dc:b0:2f:aa:98:ab:
                    5d:e7:25:91:0b:6e:56:8b:c7:b9:d3:91:fc:dd:84:
                    ca:89:f7:7d:54:1d:33:f5:69:fc:8a:2e:83:1a:70:
                    42:bc:26:2b:8b:5e:8a:61:07:78:9d:61:0b:c1:e8:
                    82:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:46:4B:19:3B:F7:D2:78:4D:1B:96:9A:63:79:8D:5E:76:18:1F:D8
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9e5fb684-f4b9-46f3-bda5-87fbe6cda5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:8c:fa:07:c3:f3:c0:13:77:e8:26:6a:c7:b4:6e:c2:00:55:
         b8:f3:17:d3:79:6c:76:76:3c:5e:48:ff:12:fb:b0:1e:f9:f6:
         da:5f:86:46:41:ab:3d:92:5b:63:69:d2:70:fd:9f:68:52:3f:
         b3:02:38:9e:dc:f9:ff:d6:52:d9:04:f7:9b:e6:fe:c1:cf:f2:
         96:66:35:63:54:75:87:34:89:37:62:71:8c:39:5d:47:95:76:
         89:38:93:3f:c1:6d:6b:15:22:00:2c:9e:15:d4:90:ba:39:86:
         5f:20:3e:03:22:26:aa:12:0f:62:4b:c9:27:e6:d2:69:9f:11:
         ff:61:63:1c:ef:56:a3:bf:ea:ec:d2:fa:dd:2b:54:f2:cb:b1:
         f6:4b:ca:13:48:8d:20:e6:6f:89:8e:5b:4d:5c:59:5a:04:0b:
         cf:39:cc:9f:ba:e2:f0:a0:f0:6c:5f:f5:b1:16:f7:fb:81:d3:
         ba:d0:34:4a:eb:ed:fb:33:ea:24:3e:16:e9:1d:1d:84:41:1e:
         3e:cb:55:29:34:72:b9:82:70:a1:8d:75:9f:7c:fb:21:2e:6f:
         61:72:f8:df:ae:c8:84:98:6e:bd:c4:03:c4:be:98:45:a7:d2:
         49:e0:24:a7:86:3e:5b:50:20:e2:11:f5:56:f6:71:55:d7:1b:
         14:79:8d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----