This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d942b40c-cb30-45d8-ab22-42aa4f483b9e.roa
File:                     d942b40c-cb30-45d8-ab22-42aa4f483b9e.roa (raw, json)
Hash identifier:          3wj9ICgpaMB2KG6bm4tCLZk7gmKp3F+b+3RzRyXuCjA=
Subject key identifier:   5A:1E:02:ED:B5:33:34:1C:1F:6B:9D:9C:2C:1D:21:DE:1A:4E:C3:83
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7846F1C0C3EA59F01BB070DC4343DB9F2CFBC554
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d942b40c-cb30-45d8-ab22-42aa4f483b9e.roa
Signing time:             Sat 15 Feb 2025 04:43:22 +0000
ROA not before:           Sat 15 Feb 2025 04:43:22 +0000
ROA not after:            Sat 22 Mar 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:46:f1:c0:c3:ea:59:f0:1b:b0:70:dc:43:43:db:9f:2c:fb:c5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb 15 04:43:22 2025 GMT
            Not After : Mar 22 23:59:59 2025 GMT
        Subject: serialNumber=67689e5329721f8d74fe837f583b27a6088caf99bde28997493747508dd09d6f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8c:18:4b:d3:a7:6a:2b:41:88:78:f6:63:ec:
                    a6:2f:bd:e8:55:9e:49:00:78:d9:1a:fe:51:7c:8e:
                    49:23:32:47:ac:7b:cb:3f:03:49:6c:cf:fc:e9:c2:
                    49:85:34:1f:a4:dd:7a:04:b9:4a:30:54:83:e6:2c:
                    cb:31:e1:d9:d8:35:9e:e2:29:d4:8d:89:bf:b4:cc:
                    b9:74:2a:e6:47:84:64:01:bd:41:90:61:7f:d9:71:
                    89:27:f1:58:e6:65:ac:dc:ab:bc:5b:9c:c6:52:8c:
                    ad:2b:ce:95:a7:c1:2a:8e:d5:1e:c1:ef:a2:aa:5c:
                    ee:45:4c:26:c6:27:c2:39:a9:39:cf:51:55:d4:6b:
                    03:13:98:44:cf:e2:be:ee:b1:bd:a9:42:96:ce:34:
                    c5:dc:ba:c9:21:cf:e8:d6:d8:e6:cd:26:31:55:19:
                    d2:22:7b:6b:b3:82:38:fb:44:64:9e:e0:26:99:ff:
                    51:19:58:54:af:b4:dd:ab:c2:3f:67:7c:65:db:8a:
                    60:46:20:c2:99:47:40:65:1f:5d:2c:4d:e1:b6:19:
                    5b:68:29:16:fa:0c:63:99:10:14:0c:8a:8a:06:a0:
                    5b:63:d5:6c:9c:88:83:3e:85:41:e8:ed:8b:94:ab:
                    4c:e5:40:49:3d:34:43:39:92:05:d8:bb:58:94:5a:
                    10:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1E:02:ED:B5:33:34:1C:1F:6B:9D:9C:2C:1D:21:DE:1A:4E:C3:83
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d942b40c-cb30-45d8-ab22-42aa4f483b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:a0:9d:11:e8:94:72:83:89:54:f7:43:f7:4f:30:23:ff:fa:
         62:5b:ea:87:a4:d6:40:82:12:9d:2b:d7:36:ef:cf:3c:4e:ce:
         5e:1b:eb:36:20:33:40:25:43:c8:5b:c3:46:2f:09:31:15:58:
         ff:29:59:ee:60:60:80:e7:88:9d:2d:1b:95:80:7b:7e:87:30:
         de:26:8c:07:39:b9:59:0b:08:89:21:b4:3a:b7:4e:0a:45:f1:
         68:75:53:0b:c8:95:d3:a6:8d:24:94:ef:b5:4e:ef:28:6a:79:
         1e:a6:27:d1:e7:65:cb:45:aa:7a:d6:d5:58:1e:47:fd:4e:a4:
         34:cf:56:92:19:5a:cc:9d:eb:79:d1:98:47:33:66:ff:7b:00:
         ca:16:a2:de:10:97:0a:d5:8c:41:22:8f:48:57:3f:fa:77:1c:
         c3:16:fa:ee:55:80:13:26:f0:00:a9:95:58:2a:67:73:f4:61:
         03:4d:54:7f:72:ac:be:52:1f:61:ba:42:2c:27:b6:7c:f0:d4:
         4d:c0:68:96:46:36:0e:f8:75:0a:df:56:4c:34:ec:08:db:cc:
         ff:61:b8:6a:2e:9a:9c:37:3f:e1:f1:66:4e:7c:a1:98:80:d7:
         95:1d:cd:53:cd:58:04:0f:d4:3a:e3:6d:dc:50:da:f6:5d:a9:
         de:99:57:fa
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeEbxwMPqWfAbsHDcQ0Pbnyz7xVQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjUwMjE1MDQ0MzIyWhcNMjUwMzIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2NzY4OWU1MzI5NzIxZjhkNzRmZTgzN2Y1ODNiMjdhNjA4
OGNhZjk5YmRlMjg5OTc0OTM3NDc1MDhkZDA5ZDZmMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCljBhL06dqK0GIePZj7KYvvehVnkkAeNka/lF8jkkjMkes
e8s/A0lsz/zpwkmFNB+k3XoEuUowVIPmLMsx4dnYNZ7iKdSNib+0zLl0KuZHhGQB
vUGQYX/ZcYkn8VjmZazcq7xbnMZSjK0rzpWnwSqO1R7B76KqXO5FTCbGJ8I5qTnP
UVXUawMTmETP4r7usb2pQpbONMXcuskhz+jW2ObNJjFVGdIie2uzgjj7RGSe4CaZ
/1EZWFSvtN2rwj9nfGXbimBGIMKZR0BlH10sTeG2GVtoKRb6DGOZEBQMiooGoFtj
1WyciIM+hUHo7YuUq0zlQEk9NEM5kgXYu1iUWhBTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWh4C7bUzNBwfa52cLB0h3hpOw4MwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Q5NDJiNDBjLWNiMzAtNDVkOC1hYjIyLTQyYWE0ZjQ4M2I5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAHCgnRHolHKDiVT3Q/dPMCP/+mJb
6oek1kCCEp0r1zbvzzxOzl4b6zYgM0AlQ8hbw0YvCTEVWP8pWe5gYIDniJ0tG5WA
e36HMN4mjAc5uVkLCIkhtDq3TgpF8Wh1UwvIldOmjSSU77VO7yhqeR6mJ9HnZctF
qnrW1VgeR/1OpDTPVpIZWsyd63nRmEczZv97AMoWot4QlwrVjEEij0hXP/p3HMMW
+u5VgBMm8ACplVgqZ3P0YQNNVH9yrL5SH2G6Qiwntnzw1E3AaJZGNg74dQrfVkw0
7AjbzP9huGoumpw3P+HxZk58oZiA15UdzVPNWAQP1DrjbdxQ2vZdqd6ZV/o=
-----END CERTIFICATE-----