This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb55c5ae-ec6a-4f69-9cd5-531f7ef0ee87.roa
File:                     eb55c5ae-ec6a-4f69-9cd5-531f7ef0ee87.roa (raw, json)
Hash identifier:          cpHfjo5AL1LAglYw8nsrXLyfXp0FKynepV/5oMZP/zA=
Subject key identifier:   35:F9:EC:5E:C6:C1:D1:AF:14:40:C4:C9:6C:E6:25:1A:61:A9:2C:9F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6FC53A03D31BB37F2DFD7EDD679E0EBBB1419EDD
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb55c5ae-ec6a-4f69-9cd5-531f7ef0ee87.roa
Signing time:             Wed 26 Jun 2024 00:00:00 +0000
ROA not before:           Wed 26 Jun 2024 00:00:00 +0000
ROA not after:            Wed 31 Jul 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c5:3a:03:d3:1b:b3:7f:2d:fd:7e:dd:67:9e:0e:bb:b1:41:9e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun 26 00:00:00 2024 GMT
            Not After : Jul 31 23:59:59 2024 GMT
        Subject: serialNumber=0c2bf28c6ac549c56fc7f57450f3cd6947be0053d04fed4b028760c2480a8f00, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:c0:b0:29:18:41:bc:ad:74:c7:61:b9:33:
                    55:4e:f8:2f:41:2f:8b:c0:ec:54:14:16:1a:2a:90:
                    1a:05:52:bc:77:84:0e:39:30:a8:f3:f0:b3:8a:f9:
                    00:48:2c:92:9a:9c:45:6e:ae:1f:e3:23:b5:7e:bd:
                    0f:5f:be:c3:18:54:c7:8b:8e:58:33:9e:72:fd:f9:
                    92:12:bb:4a:10:39:78:d1:7e:a9:9f:45:2e:c5:e2:
                    e6:21:8c:b0:d6:2f:ea:9d:34:f4:e5:a1:3b:cf:30:
                    a0:40:64:a8:75:67:8d:08:c9:c3:7b:32:2f:27:6d:
                    b9:da:d4:c6:6f:fe:26:65:03:cd:b7:18:0d:36:45:
                    c5:92:4d:f2:da:c5:14:9b:98:4c:6c:b5:ed:e8:84:
                    ab:3b:9e:d6:a7:ab:00:f5:f1:67:8a:8a:e0:31:55:
                    24:ef:38:22:14:ba:dc:eb:aa:24:81:d6:9b:11:bb:
                    e5:99:11:3b:b8:0b:7c:5a:40:91:26:a0:db:2e:c9:
                    18:10:60:98:4b:ce:55:04:72:e0:a0:39:35:cb:07:
                    f6:0e:8c:12:75:b5:b5:0f:89:56:1c:15:3e:93:6f:
                    15:15:7d:e7:b8:ca:46:f1:ea:3b:56:db:78:f2:a1:
                    34:ef:6d:34:62:9a:c9:53:2d:6c:e3:0e:21:a3:4d:
                    c8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F9:EC:5E:C6:C1:D1:AF:14:40:C4:C9:6C:E6:25:1A:61:A9:2C:9F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eb55c5ae-ec6a-4f69-9cd5-531f7ef0ee87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:d2:df:82:8d:ea:5d:51:c3:ad:51:cf:bf:80:96:66:04:88:
         28:82:ae:3e:97:28:23:44:ca:b4:be:ef:03:d0:d1:fe:21:a4:
         c0:14:f8:7e:27:06:fa:3a:27:5c:9e:41:c7:3d:1f:d9:c1:4d:
         e0:94:58:5c:bf:71:a0:ab:68:fc:7a:ad:c5:cd:1f:dd:e3:75:
         6e:b9:ff:ab:c8:2e:8e:e8:13:46:c7:f9:ae:c2:19:ef:b6:3f:
         14:5e:4f:fb:05:99:bd:cf:36:88:0e:6b:11:60:1c:5e:5c:05:
         b3:39:74:76:05:57:c9:65:2b:bd:89:98:21:f9:23:fa:77:e1:
         9a:93:a1:6a:3e:29:ee:cb:38:e1:6a:27:50:7b:e2:76:db:45:
         91:f1:5d:e8:57:58:6e:7e:ac:f4:9b:42:65:f3:b5:aa:5b:0d:
         b2:50:32:79:a4:d3:fe:6e:c6:8d:1b:e7:db:7c:61:51:7f:a1:
         e0:e1:e0:7a:8c:d1:c4:5f:98:57:9e:2a:b2:83:72:b9:54:70:
         12:5c:71:53:69:71:ea:8e:4d:f6:25:3f:0c:46:61:45:9c:18:
         d4:be:2e:ce:70:d5:34:a4:ab:6d:d7:ab:dc:9e:95:e7:a1:cd:
         30:be:6b:c9:0a:d7:ed:59:dd:c0:d9:31:10:ad:ff:b9:5c:55:
         e1:a5:65:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----