This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cea09470-c98f-45f5-ab4b-c9bb60bd352e.roa
File:                     cea09470-c98f-45f5-ab4b-c9bb60bd352e.roa (raw, json)
Hash identifier:          fKMJ0rBYyrzllvfoIexa+oFjc/cIegOS7/Cd0ketTKI=
Subject key identifier:   98:91:F7:F6:B2:08:B3:3F:69:C1:71:4E:66:73:F9:16:EA:D7:E1:E9
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       397D0A6512C2C5600970E41C3B6758289C043CBA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cea09470-c98f-45f5-ab4b-c9bb60bd352e.roa
Signing time:             Fri 18 Aug 2023 00:00:00 +0000
ROA not before:           Fri 18 Aug 2023 00:00:00 +0000
ROA not after:            Fri 22 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:7d:0a:65:12:c2:c5:60:09:70:e4:1c:3b:67:58:28:9c:04:3c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 18 00:00:00 2023 GMT
            Not After : Sep 22 23:59:59 2023 GMT
        Subject: serialNumber=0c7c50448d1e6af372c71d05b047033c5a55275722b20b683c0c242880e5d893, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:5a:ab:98:d7:9e:0e:e6:03:80:59:20:3c:
                    39:26:9e:87:5f:74:21:ad:7b:f8:a8:09:81:46:bb:
                    8c:26:c4:84:93:29:b6:ce:43:f8:8e:96:8a:9c:2f:
                    49:01:d0:b9:93:9d:da:8a:bf:57:cc:db:91:44:dc:
                    76:75:d3:4f:85:95:4a:88:07:1b:b9:31:5e:53:8d:
                    d8:76:f6:8e:89:43:e8:70:5b:a9:0d:84:2a:d5:6c:
                    86:d1:fc:53:e1:14:1f:21:48:d4:3c:54:dc:91:f7:
                    89:c1:27:b8:9f:e3:1d:a1:46:3f:00:e5:17:3c:f9:
                    14:61:2f:64:5d:68:df:a8:75:12:be:69:e4:6e:ba:
                    bb:76:ae:68:8d:6b:44:a9:75:8b:00:50:5e:0d:61:
                    91:50:14:b0:90:a6:05:a8:c2:03:10:5a:7e:33:e7:
                    63:34:16:f2:60:d1:06:0b:cc:1a:de:9a:06:f9:af:
                    f5:cb:67:63:fd:5d:c5:22:58:04:7b:46:04:b5:29:
                    be:8d:90:bb:2a:74:be:77:b4:ba:d9:28:0b:9b:77:
                    8b:05:ff:80:1d:cd:95:20:6c:6d:9f:01:af:26:b3:
                    e3:62:30:96:71:e2:06:0a:3a:06:ed:76:bc:a3:3c:
                    67:9a:92:ee:44:4a:73:a5:6b:56:19:fa:b9:5e:f8:
                    b8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:91:F7:F6:B2:08:B3:3F:69:C1:71:4E:66:73:F9:16:EA:D7:E1:E9
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cea09470-c98f-45f5-ab4b-c9bb60bd352e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:90:66:84:dd:37:05:ce:b2:8e:20:d0:8b:3d:78:ae:7b:ef:
         ad:4e:9a:82:f4:57:f3:be:d3:e9:d4:f6:7f:8e:17:08:44:84:
         e7:d2:13:3c:0e:c6:90:45:ed:dd:eb:3f:4a:3b:6c:4c:83:f2:
         56:b8:ca:e9:c6:58:d8:17:56:2c:71:31:bd:9e:1e:83:db:cb:
         bf:2f:83:28:bf:9c:34:a6:d8:29:37:67:18:6f:54:9f:2b:49:
         c2:3b:ef:40:0a:78:96:72:2c:c9:af:fa:0a:95:74:59:28:f3:
         d3:3d:6f:c9:c2:07:1b:c7:bf:06:d3:a6:63:4b:57:cc:99:ed:
         1d:40:12:47:ed:7e:bc:20:0c:d1:c0:b9:33:6f:ef:cf:ca:45:
         96:d8:29:e5:2c:18:40:ae:af:89:00:3f:6e:ab:d5:0a:43:05:
         ac:88:5c:bb:c7:75:aa:40:29:33:c0:7e:de:32:92:b1:da:ce:
         a9:96:00:0c:50:14:66:c2:fc:13:b0:ce:41:28:b6:67:9f:ca:
         87:83:11:11:3b:5f:b3:a7:b6:cc:d0:34:ad:d4:d1:13:81:fe:
         45:66:19:c3:ca:e2:d7:f7:b8:fb:7e:6f:5e:0d:aa:bc:f7:be:
         1b:a1:49:7f:ef:8a:d4:cf:85:30:e6:e4:e8:50:34:5f:4f:0f:
         04:65:13:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----