This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ffd9329-c817-44d7-b11f-b80a170353b5.roa
File:                     9ffd9329-c817-44d7-b11f-b80a170353b5.roa (raw, json)
Hash identifier:          gLv23lJO6yigTrRmQd89gTT9BNumeajbVPej4zV4ccY=
Subject key identifier:   13:DF:C7:20:41:E9:6D:21:8D:23:70:69:37:6D:5F:6F:77:51:2B:05
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       300725E409A7726E1AD919E12F801E9E71A00AAC
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ffd9329-c817-44d7-b11f-b80a170353b5.roa
Signing time:             Wed 06 Sep 2023 00:00:00 +0000
ROA not before:           Wed 06 Sep 2023 00:00:00 +0000
ROA not after:            Wed 11 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:07:25:e4:09:a7:72:6e:1a:d9:19:e1:2f:80:1e:9e:71:a0:0a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep  6 00:00:00 2023 GMT
            Not After : Oct 11 23:59:59 2023 GMT
        Subject: serialNumber=2e2bbfd4671039946c101dcb2a29087d1acd1b239cb86fdb5bc53b0fad69c649, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:43:c4:41:2c:8b:06:e5:95:57:f8:34:29:
                    c0:8c:fe:99:fa:bb:8f:da:47:9e:23:73:37:25:d8:
                    18:ff:78:0a:69:df:28:4d:74:5a:b6:f2:e4:7e:c2:
                    72:97:f5:9e:4b:ca:91:19:9c:6d:24:84:50:b5:75:
                    55:17:f9:08:3d:08:a8:c1:3c:fa:87:03:1b:bf:63:
                    4b:d7:a1:03:33:41:fa:a0:da:2d:9b:dd:dd:6e:21:
                    d9:bf:7d:9c:ab:05:f5:f5:69:07:70:6b:d2:46:d5:
                    30:e1:e8:b5:96:09:f5:27:64:d2:84:a6:b0:44:c5:
                    1c:b5:41:de:51:88:4d:29:5b:86:bf:66:e8:53:58:
                    4d:c1:50:6f:f5:a3:54:3b:21:5e:02:07:d1:a4:e7:
                    59:a2:dc:e7:58:14:ee:f9:0e:c4:11:9f:58:e0:62:
                    92:1b:6f:00:90:ac:e4:e8:41:c1:6c:30:6d:7c:85:
                    48:f3:c7:3d:6d:a9:01:e9:ac:13:f7:ae:57:1b:a5:
                    e8:60:61:19:9f:c6:6e:11:57:e8:41:1a:f2:fa:49:
                    ef:2a:e2:c4:98:bb:d7:2b:69:2e:85:db:ed:1d:86:
                    3a:90:3f:32:f9:c7:74:06:1a:9a:62:a7:df:6c:94:
                    45:5f:16:ef:ee:d4:51:aa:aa:73:e7:41:63:4d:85:
                    37:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DF:C7:20:41:E9:6D:21:8D:23:70:69:37:6D:5F:6F:77:51:2B:05
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/9ffd9329-c817-44d7-b11f-b80a170353b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:ff:5b:3f:43:1d:c4:ff:be:9f:fd:24:51:4f:17:f3:31:71:
         88:7b:99:30:ef:3c:e2:f6:dc:ea:b7:9f:a4:d3:52:f7:aa:bd:
         dc:25:0d:7c:16:a7:d5:df:49:cd:a5:1a:a7:3e:2b:33:2b:38:
         84:21:0a:69:7b:c7:3f:d2:bc:32:4c:77:ba:ed:df:78:f7:5b:
         db:8e:be:1f:a5:54:c0:2d:79:f2:cc:3a:7c:16:fb:11:2d:88:
         da:4c:74:93:e7:e7:05:47:41:c4:04:03:56:fd:34:d6:a7:94:
         f2:8c:d3:97:df:35:b4:2c:8e:66:e5:ac:d1:82:88:fa:bd:1f:
         cc:fc:38:11:56:e0:b4:dc:01:91:1b:ed:90:77:e0:5e:18:5e:
         8a:88:28:68:ed:9b:2d:36:f8:c9:f7:d8:9c:5d:9f:5b:fb:3d:
         c6:b4:37:48:79:be:19:11:a4:87:78:0a:29:b0:eb:79:78:cf:
         14:8d:02:bd:ee:e5:07:3e:cc:95:d0:66:5b:5b:4f:8b:46:5b:
         3a:cf:76:09:bc:83:73:34:a8:9e:39:54:25:68:96:e2:82:6c:
         ea:cb:0d:a8:b6:1a:06:a9:01:11:1b:57:fd:87:8e:27:44:58:
         84:74:c6:55:e1:46:f6:ae:fe:91:7e:1e:b3:15:fa:20:19:db:
         1e:ca:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----