This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cada2fa4-ca03-4d63-9365-3ba2d6405e29.roa
File:                     cada2fa4-ca03-4d63-9365-3ba2d6405e29.roa (raw, json)
Hash identifier:          CW+DVFDcHdIE2MEjQob6FCD7tsz0Ya14QkW1BlFHR8o=
Subject key identifier:   D8:73:DE:D8:0F:A8:28:1E:96:77:1F:75:F6:6A:2C:BB:BA:24:41:B3
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       383D1208BA08253B5D293162D90B32D968D7488A
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cada2fa4-ca03-4d63-9365-3ba2d6405e29.roa
Signing time:             Sat 22 Feb 2025 10:58:23 +0000
ROA not before:           Sat 22 Feb 2025 10:58:23 +0000
ROA not after:            Sat 29 Mar 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:3d:12:08:ba:08:25:3b:5d:29:31:62:d9:0b:32:d9:68:d7:48:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb 22 10:58:23 2025 GMT
            Not After : Mar 29 23:59:59 2025 GMT
        Subject: serialNumber=c0e0078f9cc9b89e216f7189ccc43cf2681ef0e224dcba5728896b994505f628, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:5c:2d:6f:57:64:1b:c5:54:3f:62:96:78:
                    bb:b1:5e:5a:04:ed:75:a1:c7:2e:94:42:18:82:00:
                    ff:5d:0d:65:79:c4:f8:ad:9c:38:6c:b4:53:46:04:
                    b4:45:37:d0:46:98:70:09:1d:16:c9:1e:5e:4f:57:
                    6f:85:20:7f:db:0b:f4:67:c3:86:a2:ab:2a:7a:5a:
                    be:fd:8a:9d:e9:42:d7:f6:80:60:ff:c5:e5:f3:e4:
                    20:31:6c:6c:dc:69:ea:02:03:20:f0:64:90:7b:02:
                    53:9a:cf:e9:22:36:cd:98:dc:89:95:b0:8b:fb:a2:
                    92:a8:f1:74:61:44:55:04:6a:06:bb:41:98:7a:ba:
                    0c:e2:78:1c:80:8e:50:6a:64:15:87:0a:8c:00:36:
                    f9:ac:39:11:ae:bc:6c:a7:0e:0b:53:d6:a3:ad:75:
                    ef:19:b4:58:18:71:85:66:70:2c:f1:99:75:70:57:
                    fe:9b:23:65:1c:29:4e:d7:97:25:72:57:31:10:a2:
                    d0:68:5c:17:e8:44:0a:9b:85:84:04:94:30:e6:cf:
                    7f:ee:7e:f3:e5:a0:73:59:a1:fd:14:cf:ed:46:2c:
                    54:17:63:d6:ac:f1:20:57:05:9a:d2:ca:47:df:41:
                    57:49:4f:29:d6:a5:2b:a1:20:82:8f:3e:06:23:ef:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:73:DE:D8:0F:A8:28:1E:96:77:1F:75:F6:6A:2C:BB:BA:24:41:B3
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cada2fa4-ca03-4d63-9365-3ba2d6405e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:6e:07:9d:87:23:dd:f8:99:9f:bb:8c:0c:d5:05:43:4b:1e:
         94:25:03:35:0c:64:b7:07:35:86:df:0a:0f:94:fb:05:42:4e:
         27:56:4b:70:3c:30:46:ba:6b:4b:88:14:ba:98:9b:95:bc:00:
         38:40:9a:35:64:bf:28:c0:69:7a:d6:b6:78:4d:04:84:38:2c:
         d7:e2:98:7f:39:6f:a2:c3:99:4a:34:6d:34:54:19:5b:59:76:
         b0:9b:17:3c:61:45:19:f6:63:dc:6e:3c:05:26:ef:e5:3a:8a:
         72:2a:0c:84:f7:7b:6a:7d:b6:6a:38:64:98:52:0e:5d:61:b6:
         83:84:0e:30:51:c5:c0:1f:09:b3:be:3d:76:a6:0d:71:9f:29:
         bc:33:89:9e:20:50:87:72:07:cb:c8:37:cb:43:66:39:20:e9:
         a9:a5:c1:dd:d0:60:d1:0b:de:10:27:36:33:e2:a4:2f:9f:63:
         29:c7:67:c5:c6:49:f1:23:8c:ae:1d:7b:df:2d:51:e3:10:84:
         67:13:d6:50:ae:88:19:38:8a:b8:6f:e3:1a:72:d8:63:eb:7e:
         f3:69:ec:a6:af:73:aa:4b:e7:21:ac:34:d0:e6:08:3b:ff:db:
         6b:a1:6f:54:87:2d:9a:73:67:eb:58:9a:d2:48:13:30:38:62:
         2f:84:85:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----