This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e0424838-098c-46be-b2b6-d39c5193cde4.roa
File:                     e0424838-098c-46be-b2b6-d39c5193cde4.roa (raw, json)
Hash identifier:          2NBVnyPTGbeckc30BNCJP3+dVS5lkD+GhWTAipOfrao=
Subject key identifier:   8E:9A:CA:95:FD:6E:32:F2:4F:CE:97:DD:B2:57:B7:CB:15:FD:52:33
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2959335A3E21A058B3015542E916ADFCBF94707F
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e0424838-098c-46be-b2b6-d39c5193cde4.roa
Signing time:             Mon 17 Feb 2025 08:38:22 +0000
ROA not before:           Mon 17 Feb 2025 08:38:22 +0000
ROA not after:            Mon 24 Mar 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:59:33:5a:3e:21:a0:58:b3:01:55:42:e9:16:ad:fc:bf:94:70:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb 17 08:38:22 2025 GMT
            Not After : Mar 24 23:59:59 2025 GMT
        Subject: serialNumber=2e9959e95e5645ddee3e5604e172ca75000ffe26a8d171aae1805e458a30080e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:81:89:2f:3d:04:f3:2a:c9:12:1b:bc:8d:
                    bf:1f:c6:72:21:53:cd:f8:5e:86:41:ab:d5:22:04:
                    c3:3e:e5:48:b8:03:80:fd:be:92:4a:cf:a1:99:17:
                    7b:aa:ec:3b:37:bc:d4:4e:80:f0:6b:ff:65:3f:2b:
                    79:1b:1e:d5:48:08:2a:0b:e7:e6:d3:3e:af:1d:04:
                    a9:13:9d:cd:d7:9a:68:14:4d:98:58:15:dd:2a:2d:
                    e1:90:e7:1e:78:83:e9:1c:4f:12:61:41:68:1f:df:
                    72:0f:62:fe:1c:7d:41:87:32:80:c9:08:a5:b5:02:
                    f0:6f:24:7c:4f:db:49:46:b6:a6:81:c3:6c:26:35:
                    7f:45:19:42:e5:f9:7e:60:ac:dc:a1:44:0a:ca:9a:
                    30:1d:0c:71:7f:8a:f5:43:7e:d5:b4:20:5d:ea:b8:
                    cd:15:d2:30:09:74:5d:b6:4f:c1:94:ea:5d:19:04:
                    f3:23:7b:8a:da:0d:3c:13:77:35:6a:36:b5:24:75:
                    a8:26:a0:71:96:54:9f:7b:74:28:73:d7:ad:9d:8c:
                    b0:33:7b:0c:28:2f:13:39:f9:da:f1:ac:ec:bc:98:
                    d8:39:57:43:3f:fb:4a:35:61:89:4a:af:c3:53:10:
                    e8:2f:c7:3a:cc:09:12:a6:63:b4:b3:3c:dd:5e:2d:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9A:CA:95:FD:6E:32:F2:4F:CE:97:DD:B2:57:B7:CB:15:FD:52:33
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e0424838-098c-46be-b2b6-d39c5193cde4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:01:4a:1f:2a:18:8c:0a:7c:b5:57:f5:e2:e1:be:41:fb:b0:
         4d:55:74:7f:1a:50:15:d2:5c:ed:03:3b:9a:40:ca:31:42:64:
         f1:33:45:20:00:38:44:7b:7b:35:24:6f:23:c9:90:71:d8:19:
         13:bb:8b:77:a3:b2:d0:41:61:c4:06:36:01:78:2b:87:d8:9c:
         9c:92:e9:9b:58:3d:44:3c:25:0a:1c:3e:5c:fb:c4:f7:cf:1d:
         af:6b:73:62:ea:3e:17:3d:7c:17:4e:bd:09:65:4c:39:de:f6:
         1e:df:a5:99:32:22:46:7e:11:ec:86:5d:b1:83:2f:84:2a:a3:
         db:25:ff:e0:55:2d:a7:1e:73:43:97:0d:d5:ca:9c:f4:f9:31:
         8f:ea:94:a6:73:a9:9b:ce:9a:dc:48:08:77:6b:c4:1a:74:87:
         e0:22:60:6c:d6:e8:c9:78:a7:e3:2b:b9:9f:ea:43:5b:0f:6a:
         22:96:0a:86:a3:77:88:59:f7:22:68:66:13:18:dc:b2:01:50:
         ef:60:2d:ef:e4:6c:ce:ee:7e:af:f2:29:dc:e8:43:b2:74:19:
         ba:06:35:2a:b7:28:19:02:9b:d5:de:79:86:6d:2f:e7:0b:1f:
         16:af:1b:8e:69:2f:09:51:b8:09:b9:06:74:26:4e:72:06:60:
         2f:1c:1f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----