This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf164b56-8c1b-4c17-a44c-11d40799f216.roa
File:                     cf164b56-8c1b-4c17-a44c-11d40799f216.roa (raw, json)
Hash identifier:          47TdUw8msRLsrEDBXkWvWgqxryF4XHIS0OGhx8OEpsI=
Subject key identifier:   66:3D:DA:31:49:71:28:72:03:C7:99:AE:66:43:15:3E:59:8F:8B:7F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4D0815C13B1BA6DCB007D6048845DA6D03569153
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf164b56-8c1b-4c17-a44c-11d40799f216.roa
Signing time:             Sun 20 Apr 2025 23:23:22 +0000
ROA not before:           Sun 20 Apr 2025 23:23:22 +0000
ROA not after:            Sun 25 May 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:08:15:c1:3b:1b:a6:dc:b0:07:d6:04:88:45:da:6d:03:56:91:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 20 23:23:22 2025 GMT
            Not After : May 25 23:59:59 2025 GMT
        Subject: serialNumber=4ee3d713db74fcd73e48713389bc93392e3c1079a662cfda3f91f28c77811221, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:aa:c2:16:23:1d:e7:92:5c:48:6b:f9:34:ab:
                    a6:0d:89:90:ef:ea:ee:b4:ac:b2:0f:55:9f:08:57:
                    4b:cc:2b:6a:4a:28:b7:53:a4:1c:9e:ee:fd:40:c8:
                    6b:f0:a2:de:0b:c1:26:bc:f8:a6:73:07:b1:03:27:
                    ec:9e:49:71:8a:18:b6:8a:d9:d4:dc:94:69:91:ef:
                    99:a5:00:eb:cc:34:e1:99:02:6d:3f:e3:2f:bf:d8:
                    01:02:68:30:bb:36:78:81:dc:cb:df:69:c6:6a:ae:
                    a5:db:0a:d8:e8:6a:91:5a:6e:f2:25:fa:fd:f2:d9:
                    5c:82:d0:3b:9f:79:1e:57:9b:66:46:ed:8f:78:8b:
                    af:ec:ff:f8:be:d7:fa:55:c1:ee:18:3e:f1:eb:fd:
                    a1:f5:7f:d8:6b:4f:02:52:0e:db:b0:6a:18:9d:99:
                    a5:1d:6e:a1:10:43:75:dd:da:1d:0d:9a:38:ab:37:
                    8c:9c:3a:cd:bb:43:d3:d3:6b:f8:6e:aa:1f:d8:58:
                    f9:82:45:7d:3d:b4:65:f3:e6:1d:cd:a7:6a:00:e0:
                    09:cc:e7:81:ca:0e:9d:67:47:82:f7:fa:07:b5:b4:
                    b7:1f:f2:c8:7d:10:98:3c:2a:98:23:55:72:4c:2f:
                    90:50:9c:85:65:eb:7b:66:53:71:3e:86:bc:d2:46:
                    5b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3D:DA:31:49:71:28:72:03:C7:99:AE:66:43:15:3E:59:8F:8B:7F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/cf164b56-8c1b-4c17-a44c-11d40799f216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:45:7a:82:2b:77:28:a3:cb:b7:0b:c4:35:69:30:1a:46:8a:
         c1:e9:b8:0a:cc:1f:65:cb:d6:22:a3:b0:2d:c8:72:3e:63:07:
         e1:5b:5e:7b:15:e2:da:de:14:7f:1c:36:b2:15:f4:59:b9:35:
         ac:cf:68:23:a4:bb:ba:41:77:4a:18:cd:8e:cf:64:21:a2:8e:
         91:e4:b5:be:3b:6b:34:39:0f:6f:40:07:12:25:64:51:7c:e8:
         2a:7a:7b:66:5d:e5:74:3d:99:38:13:b7:5e:a9:8e:42:4c:ab:
         f6:43:db:67:34:59:71:83:d7:b8:57:69:b3:e0:c3:e1:42:da:
         68:80:61:d8:e1:20:69:1c:fb:ac:01:3d:52:b8:a9:55:23:87:
         2c:75:cf:2d:10:a4:46:85:c5:4f:b4:b1:1b:43:ef:6e:0a:3a:
         99:ab:df:d6:61:71:53:38:69:ca:d0:d2:22:94:f5:fd:3b:a6:
         7e:fd:7e:07:60:4a:e8:13:a4:55:9e:bb:f1:d3:45:4e:29:69:
         3e:8a:e7:b8:7d:99:7e:97:23:dc:a1:ba:f0:55:bc:2b:d2:2f:
         29:0a:ef:f4:d0:67:7f:f8:60:9c:76:c6:46:c6:b2:09:97:8c:
         82:13:ce:48:18:4b:d1:a9:af:b8:19:d9:c5:bc:a9:0d:02:70:
         91:e0:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----