This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b86def91-c188-4b2b-82a2-7d96d1990b88.roa
File:                     b86def91-c188-4b2b-82a2-7d96d1990b88.roa (raw, json)
Hash identifier:          WrAFeDpbIg08D7PkBeVccfBaj+w8ITBPsAbywNpyR0g=
Subject key identifier:   4B:6D:B7:6B:6A:02:69:54:F0:97:16:85:0B:1D:31:8C:77:81:3D:BE
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5F649394026B5D1B9889679F9C224953BDD90EDE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b86def91-c188-4b2b-82a2-7d96d1990b88.roa
Signing time:             Thu 25 Jul 2024 00:00:00 +0000
ROA not before:           Thu 25 Jul 2024 00:00:00 +0000
ROA not after:            Thu 29 Aug 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:64:93:94:02:6b:5d:1b:98:89:67:9f:9c:22:49:53:bd:d9:0e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 25 00:00:00 2024 GMT
            Not After : Aug 29 23:59:59 2024 GMT
        Subject: serialNumber=e3795ab59fbc85fcbce112f56acdc8c6e7becf9fa9419bf9bb301aa96ef744b9, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:9f:78:3d:c9:d2:b1:b3:8b:f0:8a:af:ee:
                    7e:b3:ad:b9:b2:12:a7:81:f0:74:0e:4a:02:0a:54:
                    80:49:61:4d:f8:0f:8d:30:fa:80:f4:1f:a1:5b:55:
                    f5:6b:7f:e7:c9:75:51:77:f0:16:ff:7c:9d:dc:2b:
                    48:68:cb:4a:f7:b0:32:8a:f9:14:e2:08:8e:3d:cf:
                    d8:ac:5d:92:d6:90:b5:9a:d6:32:03:d1:84:70:c3:
                    ea:64:98:67:d3:c2:c8:56:6f:f4:77:3e:78:52:af:
                    f5:ad:8e:72:31:5f:24:27:de:8e:b1:56:2b:e6:46:
                    da:04:71:14:fe:26:14:ea:b1:9a:ca:37:bb:6d:8b:
                    c4:07:b5:73:2d:e9:34:7d:69:08:46:2e:91:57:0f:
                    b1:35:d8:ba:1f:3f:81:b2:b3:3b:1c:16:6c:43:63:
                    c9:aa:d2:bc:31:b7:59:80:1b:1f:78:81:13:76:36:
                    f3:17:fb:4a:6d:b2:9c:65:ac:bd:1c:c8:6e:da:00:
                    a0:a0:99:f6:ec:d6:0f:11:f9:d6:08:e0:8c:f0:00:
                    cd:a9:0e:1b:d1:3d:2e:3a:02:5e:8d:dd:2d:16:f9:
                    0a:a7:f4:97:c6:bc:60:c0:5f:5e:d4:ff:4c:3b:96:
                    a8:76:86:07:b2:41:ad:f0:14:65:74:b7:c9:ab:13:
                    fc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6D:B7:6B:6A:02:69:54:F0:97:16:85:0B:1D:31:8C:77:81:3D:BE
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/b86def91-c188-4b2b-82a2-7d96d1990b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:67:08:5d:93:0c:62:b7:08:63:8d:6c:4a:a7:60:5e:44:02:
         50:ed:32:81:99:ed:e0:a3:30:84:d7:58:ed:07:0f:67:b0:8e:
         79:52:14:c5:4d:c4:81:39:72:38:9f:06:8e:70:53:b8:ff:47:
         25:69:0c:e1:cf:e4:27:c4:0a:ce:d7:ad:c0:b3:88:14:8e:8f:
         ab:15:cd:69:ae:51:4e:08:cd:bb:97:d7:51:9c:dd:53:75:0a:
         ab:27:7f:22:7e:f8:ec:a9:7e:c2:ad:b5:bb:66:4b:8b:5c:09:
         b1:67:71:e3:4a:32:61:36:70:12:63:11:2c:6a:a1:31:6c:93:
         71:ff:90:6c:07:b4:d4:58:76:71:a6:13:82:a2:95:ca:44:a5:
         cb:48:28:04:ae:d2:90:d4:f2:2b:f7:d1:ff:82:87:74:8e:3e:
         2b:57:cc:a7:4b:a4:08:dc:7c:a9:d7:2a:24:74:c9:93:a6:c8:
         fb:e9:ae:a8:06:55:23:b0:37:d9:9c:b5:24:c2:dc:2a:6b:b7:
         67:2d:ee:5a:63:f1:5d:be:d0:41:71:1a:0e:58:df:ca:23:87:
         75:70:da:d1:d5:1c:53:84:6f:22:37:ae:d6:4e:f2:42:bb:71:
         1b:59:de:9b:a4:a5:c1:a4:66:31:0c:58:4e:51:84:7c:29:84:
         7b:5e:6f:e0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUX2STlAJrXRuYiWefnCJJU73ZDt4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNzI1MDAwMDAwWhcNMjQwODI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMzc5NWFiNTlmYmM4NWZjYmNlMTEyZjU2YWNkYzhjNmU3
YmVjZjlmYTk0MTliZjliYjMwMWFhOTZlZjc0NGI5MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9Jp94PcnSsbOL8Iqv7n6zrbmyEqeB8HQOSgIKVIBJYU34
D40w+oD0H6FbVfVrf+fJdVF38Bb/fJ3cK0hoy0r3sDKK+RTiCI49z9isXZLWkLWa
1jID0YRww+pkmGfTwshWb/R3PnhSr/WtjnIxXyQn3o6xVivmRtoEcRT+JhTqsZrK
N7tti8QHtXMt6TR9aQhGLpFXD7E12LofP4GyszscFmxDY8mq0rwxt1mAGx94gRN2
NvMX+0ptspxlrL0cyG7aAKCgmfbs1g8R+dYI4IzwAM2pDhvRPS46Al6N3S0W+Qqn
9JfGvGDAX17U/0w7lqh2hgeyQa3wFGV0t8mrE/y1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUS223a2oCaVTwlxaFCx0xjHeBPb4wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2I4NmRlZjkxLWMxODgtNGIyYi04MmEyLTdkOTZkMTk5MGI4OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBABJnCF2TDGK3CGONbEqnYF5EAlDt
MoGZ7eCjMITXWO0HD2ewjnlSFMVNxIE5cjifBo5wU7j/RyVpDOHP5CfECs7XrcCz
iBSOj6sVzWmuUU4IzbuX11Gc3VN1CqsnfyJ++OypfsKttbtmS4tcCbFnceNKMmE2
cBJjESxqoTFsk3H/kGwHtNRYdnGmE4KilcpEpctIKASu0pDU8iv30f+Ch3SOPitX
zKdLpAjcfKnXKiR0yZOmyPvprqgGVSOwN9mctSTC3Cprt2ct7lpj8V2+0EFxGg5Y
38ojh3Vw2tHVHFOEbyI3rtZO8kK7cRtZ3pukpcGkZjEMWE5RhHwphHteb+A=
-----END CERTIFICATE-----
Generated at Sun Dec 21 11:14:08 2025 by rpki-client