This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab52abe9-e9bd-42a3-bac4-17d10c57c3b8.roa
File:                     ab52abe9-e9bd-42a3-bac4-17d10c57c3b8.roa (raw, json)
Hash identifier:          uRaSNNXSQvcYmldVtnDUXeVzutgI3t6kuDKVUfQDVnM=
Subject key identifier:   72:B9:B7:1B:B4:9E:62:12:C8:EF:FA:8E:D5:78:0B:0E:9B:D3:C4:97
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       16AD6EC90ED1BAF11F84005B0761412C90542F79
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab52abe9-e9bd-42a3-bac4-17d10c57c3b8.roa
Signing time:             Fri 25 Oct 2024 00:00:00 +0000
ROA not before:           Fri 25 Oct 2024 00:00:00 +0000
ROA not after:            Fri 29 Nov 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ad:6e:c9:0e:d1:ba:f1:1f:84:00:5b:07:61:41:2c:90:54:2f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct 25 00:00:00 2024 GMT
            Not After : Nov 29 23:59:59 2024 GMT
        Subject: serialNumber=409033bba3547ed3bac19618b5e087df6e6db3552a4c75270532f6c4107e02d9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:de:4d:3b:3a:b7:84:6f:3b:97:ab:40:4d:
                    0e:73:81:8f:a3:20:be:2f:e9:b3:e9:aa:58:71:f1:
                    49:6d:5d:6d:4e:5e:43:68:1c:49:9f:39:73:ef:c6:
                    39:88:e4:4f:2c:4a:b8:98:e3:96:f8:04:74:6c:d0:
                    c8:ea:15:11:4d:a1:33:ca:e8:49:b0:69:4d:b8:db:
                    cc:2a:f2:e0:51:2b:30:1e:90:27:79:85:06:88:0d:
                    e2:16:11:59:85:2e:f9:dc:01:65:ec:ac:21:10:d7:
                    33:49:8c:f1:b5:bd:ad:69:19:70:cd:1a:8d:ff:b4:
                    09:d6:eb:e8:e4:02:09:a9:45:03:17:68:84:0a:3a:
                    87:5e:68:57:d9:21:d4:87:89:36:6b:7c:3f:ff:e0:
                    8c:24:bc:15:fc:9a:5b:d4:df:37:48:78:5a:4b:52:
                    af:5e:74:bb:6b:5d:b6:9f:98:b8:e5:e6:0e:12:31:
                    1b:61:d4:e4:6d:38:c2:90:6a:3e:8c:49:7a:71:af:
                    cc:ce:37:e4:b4:26:bf:b9:3a:d0:25:ef:d3:de:29:
                    de:28:bf:d1:9f:47:54:2c:11:52:4f:70:01:ee:7e:
                    21:5a:f7:e9:1f:b1:8e:cd:b2:7c:7f:5b:56:86:ee:
                    0b:c4:dc:4d:0f:16:19:7d:18:e0:95:b9:86:22:aa:
                    2c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B9:B7:1B:B4:9E:62:12:C8:EF:FA:8E:D5:78:0B:0E:9B:D3:C4:97
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/ab52abe9-e9bd-42a3-bac4-17d10c57c3b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:fc:ea:72:db:fb:f5:f4:ba:36:83:6c:1a:c5:0f:f4:f1:7b:
         6c:c9:51:84:98:48:08:6e:3c:92:0d:77:d5:10:d1:96:7c:ff:
         70:89:06:11:0e:bf:cb:21:bb:69:7d:b0:4b:3e:7b:d3:3a:51:
         34:aa:01:3b:e9:e4:da:54:4a:10:ed:4d:20:01:a9:40:8e:c9:
         3f:7c:2c:01:66:39:e0:ab:ae:15:87:d9:c9:41:97:dc:06:9e:
         f7:62:a2:4b:a7:5b:f4:f9:74:87:94:11:31:3f:df:69:c8:e7:
         d3:82:c5:8b:5f:23:54:a7:44:9a:e7:c4:06:ed:20:3a:89:be:
         16:d9:f1:1c:ed:08:09:8e:41:cf:71:ca:d8:36:09:f8:3b:f3:
         48:a5:3b:3d:99:a5:48:15:9a:7b:73:c5:99:51:38:c7:3f:b2:
         93:59:40:bb:c6:89:a0:d8:31:97:89:1e:85:77:07:ac:12:dd:
         d1:ef:b3:7f:a2:26:c4:bc:a5:ed:9c:51:5f:bb:d6:de:8b:0f:
         cf:58:08:66:05:c5:e1:33:ae:8f:ec:29:94:18:bf:8e:df:34:
         5f:57:1d:7d:e1:58:20:b5:ea:d3:19:fd:3c:9b:a3:bd:07:a2:
         c5:63:98:27:da:2e:fc:fa:3b:e3:ec:ac:78:93:ae:e7:54:d8:
         6d:09:2b:73
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFq1uyQ7RuvEfhABbB2FBLJBUL3kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQxMDI1MDAwMDAwWhcNMjQxMTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MDkwMzNiYmEzNTQ3ZWQzYmFjMTk2MThiNWUwODdkZjZl
NmRiMzU1MmE0Yzc1MjcwNTMyZjZjNDEwN2UwMmQ5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDN8t5NOzq3hG87l6tATQ5zgY+jIL4v6bPpqlhx8UltXW1O
XkNoHEmfOXPvxjmI5E8sSriY45b4BHRs0MjqFRFNoTPK6EmwaU2428wq8uBRKzAe
kCd5hQaIDeIWEVmFLvncAWXsrCEQ1zNJjPG1va1pGXDNGo3/tAnW6+jkAgmpRQMX
aIQKOodeaFfZIdSHiTZrfD//4IwkvBX8mlvU3zdIeFpLUq9edLtrXbafmLjl5g4S
MRth1ORtOMKQaj6MSXpxr8zON+S0Jr+5OtAl79PeKd4ov9GfR1QsEVJPcAHufiFa
9+kfsY7Nsnx/W1aG7gvE3E0PFhl9GOCVuYYiqixPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcrm3G7SeYhLI7/qO1XgLDpvTxJcwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2FiNTJhYmU5LWU5YmQtNDJhMy1iYWM0LTE3ZDEwYzU3YzNiOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAGr86nLb+/X0ujaDbBrFD/Txe2zJ
UYSYSAhuPJINd9UQ0ZZ8/3CJBhEOv8shu2l9sEs+e9M6UTSqATvp5NpUShDtTSAB
qUCOyT98LAFmOeCrrhWH2clBl9wGnvdiokunW/T5dIeUETE/32nI59OCxYtfI1Sn
RJrnxAbtIDqJvhbZ8RztCAmOQc9xytg2Cfg780ilOz2ZpUgVmntzxZlROMc/spNZ
QLvGiaDYMZeJHoV3B6wS3dHvs3+iJsS8pe2cUV+71t6LD89YCGYFxeEzro/sKZQY
v47fNF9XHX3hWCC16tMZ/Tybo70HosVjmCfaLvz6O+PsrHiTrudU2G0JK3M=
-----END CERTIFICATE-----