This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d151efc4-10f1-481d-a16b-a7dff915d0f3.roa
File:                     d151efc4-10f1-481d-a16b-a7dff915d0f3.roa (raw, json)
Hash identifier:          EDTCNAK4hx0sAWUYrGJ7HtT3zZ/+OzqhISKgBfcr3ck=
Subject key identifier:   F1:A2:90:49:31:37:69:40:A6:F8:90:56:9A:61:5B:A1:41:A1:11:DD
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       17E86745DFC82FED78B0830F7DA8C5F958824DD9
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d151efc4-10f1-481d-a16b-a7dff915d0f3.roa
Signing time:             Sat 30 Sep 2023 00:00:00 +0000
ROA not before:           Sat 30 Sep 2023 00:00:00 +0000
ROA not after:            Sat 04 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:e8:67:45:df:c8:2f:ed:78:b0:83:0f:7d:a8:c5:f9:58:82:4d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 30 00:00:00 2023 GMT
            Not After : Nov  4 23:59:59 2023 GMT
        Subject: serialNumber=47129d9995c5dcd74378ec33030eee1d37ad9aa5b081e9d460fc0e05bd54b851, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:33:6f:1b:90:8c:80:a7:68:d0:ff:14:5d:dc:
                    41:99:12:65:0c:c3:01:81:f0:ed:2d:a8:38:8b:49:
                    a3:63:f1:45:7c:0e:58:95:94:47:51:1c:1e:3b:7e:
                    27:e1:3b:c1:01:22:a5:06:83:81:ea:73:68:53:a7:
                    2b:34:e3:9b:61:d9:ce:37:7b:b0:e8:86:0d:d2:fe:
                    13:de:8e:46:c8:a0:84:58:eb:4d:8c:74:73:1f:bf:
                    df:96:46:05:b0:a8:46:4b:b5:09:67:8b:1a:b9:3f:
                    7b:53:45:29:67:9d:96:b3:b4:b7:80:2e:14:fb:87:
                    33:5a:d6:09:47:2d:e8:76:8d:76:c3:8e:06:1f:a2:
                    a0:e1:01:c8:ef:79:f4:f3:4b:ab:87:3e:ff:db:60:
                    f2:f7:eb:6e:53:b1:83:6c:e1:a1:18:37:1f:91:bd:
                    61:fa:dd:3c:7e:98:d0:7d:cf:9e:2a:33:f6:2f:73:
                    89:7c:01:71:b0:88:6a:3b:fb:02:04:f0:83:c6:14:
                    f7:38:f6:8e:d1:9e:9b:a4:7d:a3:ea:45:36:3e:d6:
                    7a:d2:e1:e5:8a:2f:60:94:50:69:50:6c:5d:80:21:
                    05:a5:12:03:46:b2:94:f6:fb:cb:81:ef:6a:a7:48:
                    a2:86:d2:4e:58:85:54:cc:84:99:02:5d:f7:06:83:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A2:90:49:31:37:69:40:A6:F8:90:56:9A:61:5B:A1:41:A1:11:DD
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d151efc4-10f1-481d-a16b-a7dff915d0f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:20:29:01:d8:08:17:d2:f4:3b:7e:6b:6b:cc:dd:f9:a7:09:
         aa:8a:f4:33:7a:f6:77:ef:23:d4:96:5a:80:6f:6f:81:1b:f7:
         56:62:ce:76:70:c6:8a:b5:ba:45:b1:4b:63:e1:b3:68:0c:86:
         af:d6:0b:90:7c:fe:ed:6d:4e:11:9e:7e:25:91:1e:a1:bf:e6:
         2d:15:f9:0d:98:56:fc:1b:2a:d2:b6:24:66:4c:0f:fd:08:02:
         ff:77:1e:9e:22:00:db:1b:14:35:d5:42:62:6d:83:cc:82:3c:
         26:4d:84:03:39:f2:a9:f2:37:94:f6:4e:dd:e8:f1:4b:62:44:
         87:5f:b4:6a:8d:66:77:ad:6f:f7:c8:f0:bf:76:d6:9f:df:1b:
         4b:e1:0b:83:99:43:91:59:89:cc:b5:55:f5:43:5b:38:98:79:
         3f:c3:8c:48:c4:3e:2e:c1:14:81:fa:61:b0:be:32:62:6e:3a:
         3f:76:df:44:b2:ee:c5:ba:e6:0d:31:55:ba:b1:90:a7:92:b3:
         e8:5a:e0:79:e5:40:e9:1f:1d:ec:06:e6:ac:06:8e:00:04:ac:
         38:94:77:36:5d:91:61:17:fc:97:eb:b3:c1:a6:9a:ef:2d:dd:
         01:6e:8d:1e:87:1e:0f:25:a8:d2:9a:1b:8a:60:77:fe:db:a6:
         5e:47:7e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----