This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bc933c6e-2669-4fff-828e-68cb58261e8a.roa
File:                     bc933c6e-2669-4fff-828e-68cb58261e8a.roa (raw, json)
Hash identifier:          0dVx8U3WB0VmTnTcDOwXwjA1MyrH5HKG8swyM+2XJfw=
Subject key identifier:   16:7D:6C:CE:6A:3D:44:29:98:F2:30:35:F3:AD:7B:0C:6C:18:2D:85
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       199AD32AB882B674E31C07F5811DFDA1D31A70DB
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bc933c6e-2669-4fff-828e-68cb58261e8a.roa
Signing time:             Wed 23 Apr 2025 15:23:17 +0000
ROA not before:           Wed 23 Apr 2025 15:23:17 +0000
ROA not after:            Wed 28 May 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:9a:d3:2a:b8:82:b6:74:e3:1c:07:f5:81:1d:fd:a1:d3:1a:70:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 23 15:23:17 2025 GMT
            Not After : May 28 23:59:59 2025 GMT
        Subject: serialNumber=5869b7f57544464943ed1d09ca946b514368105677a10e7d92404c2a2c648e74, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c3:cd:87:70:db:3b:2c:57:fe:5e:4d:61:4f:
                    9c:a4:b6:eb:0e:b6:85:ac:bf:7b:95:c7:14:a7:65:
                    22:4e:9e:fb:66:c1:44:65:76:d9:d7:06:58:3f:90:
                    a4:26:5e:aa:46:f4:62:3f:f0:d2:c1:32:ab:b0:bd:
                    e5:76:e1:80:be:23:75:13:fe:5b:ee:1b:96:07:0f:
                    f1:4a:b0:f2:58:53:84:f1:bb:9b:a1:06:ae:71:3e:
                    7f:74:32:16:d1:e7:6f:b4:e9:d5:ce:99:e5:26:be:
                    8d:8c:8b:66:69:31:b5:61:ab:72:44:6f:1d:fc:df:
                    49:07:b3:41:bd:e2:25:53:50:5e:c4:46:78:aa:9d:
                    89:11:f5:5e:e0:cb:bd:b5:9e:33:81:72:9f:c3:bd:
                    9d:7e:a6:97:1c:1c:26:55:a0:41:e1:ec:50:ee:99:
                    8b:36:3a:ab:90:de:58:c1:cb:cd:68:f6:a4:e8:cc:
                    5f:13:f6:c0:bd:3e:c8:42:7d:96:df:8e:87:ca:b5:
                    dc:e5:dd:cf:33:81:e6:d9:9c:db:03:2e:39:b9:84:
                    e8:c0:ff:b6:16:a8:3a:e0:0a:f4:31:d2:ad:f3:18:
                    61:0b:99:ba:04:3e:2b:53:9d:50:f3:6e:e4:9e:bc:
                    ef:91:66:a0:15:39:57:a6:ce:c7:42:0b:fd:e3:ca:
                    46:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7D:6C:CE:6A:3D:44:29:98:F2:30:35:F3:AD:7B:0C:6C:18:2D:85
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/bc933c6e-2669-4fff-828e-68cb58261e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a9:f3:6f:e3:9c:0d:72:7b:32:2b:15:a7:84:93:dd:76:40:
         49:df:56:5d:ae:9c:e8:fc:30:af:0a:88:60:6e:1b:50:dc:11:
         0a:e8:9e:64:eb:6b:8a:e8:8d:a9:4d:6d:89:57:49:70:be:b1:
         c0:27:97:70:6b:90:ee:23:e0:84:84:b5:c9:60:0f:6c:75:07:
         4f:3a:19:37:52:52:6d:f5:0a:58:21:41:49:3f:50:49:66:d5:
         df:40:3d:03:d0:59:59:81:bd:83:00:24:b4:b1:a7:d9:4d:86:
         0e:a0:22:98:ce:3e:65:73:85:1b:51:c4:ec:d8:82:2e:f7:35:
         db:81:48:31:66:a7:be:e0:9a:ad:cf:fa:98:a8:f6:ae:2a:f3:
         15:e6:ea:26:0a:52:bb:2f:5f:3f:0c:26:21:d9:ae:85:30:79:
         26:b6:e0:c1:61:35:5e:b6:e0:cf:7a:be:94:74:9a:23:62:b5:
         d7:24:26:9b:cb:3d:fc:ad:e4:4a:63:b5:20:a2:74:5c:13:e4:
         3d:42:ec:22:67:a7:d5:a4:32:3b:33:fb:e4:19:b7:b3:4a:3f:
         79:b4:56:4f:15:c7:02:99:0b:a5:1f:fc:d1:e9:13:c5:79:c4:
         47:31:2b:d8:82:d5:ca:99:3b:f9:90:b1:0b:f8:d7:b6:1e:f8:
         b8:c2:7b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----