This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/efa137a3-f549-40e6-beab-f4d280b76674.roa
File:                     efa137a3-f549-40e6-beab-f4d280b76674.roa (raw, json)
Hash identifier:          V6q21kAdG3uNAv/N/CjAyUcZDgxIO8ZTs+0ln+vzZhY=
Subject key identifier:   CA:4E:A0:3A:F0:9E:41:2C:B3:1F:B3:7F:E4:B3:0A:FD:5D:DA:CE:D0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4A17F342FEE98042241B129F8D24CB8418604A8E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/efa137a3-f549-40e6-beab-f4d280b76674.roa
Signing time:             Sun 18 Aug 2024 00:00:00 +0000
ROA not before:           Sun 18 Aug 2024 00:00:00 +0000
ROA not after:            Sun 22 Sep 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:17:f3:42:fe:e9:80:42:24:1b:12:9f:8d:24:cb:84:18:60:4a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 18 00:00:00 2024 GMT
            Not After : Sep 22 23:59:59 2024 GMT
        Subject: serialNumber=822a3efe0755d47db2e18ef812c388a93f5b9137f59a5e020119809b1b8d6be2, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:de:eb:90:f8:c1:94:9d:da:6c:2b:ca:93:67:
                    22:11:ae:8b:de:c5:cd:dd:75:53:58:9e:8a:42:cb:
                    1b:de:d2:ed:e9:0a:63:98:65:c8:c2:ef:9b:f7:98:
                    ee:ad:43:16:d7:b3:89:3a:b3:9d:14:8f:4e:4e:a8:
                    d4:2c:07:6c:b3:6f:06:50:c4:1a:be:42:9f:ae:51:
                    b7:8e:8c:36:47:a7:46:f9:c7:52:c8:7d:c4:eb:bf:
                    16:a3:64:73:84:bd:8f:1b:76:64:96:23:94:81:c2:
                    9d:03:27:6d:d0:5d:e7:e6:d6:2d:31:d3:7c:22:3c:
                    6f:29:84:06:94:37:3f:c8:af:05:2f:6c:e5:c7:6b:
                    99:7d:2b:3a:92:f9:34:47:b5:46:55:ce:3f:30:45:
                    6d:27:39:2c:35:34:f6:b0:91:b9:7a:0f:d9:55:3f:
                    5a:86:1f:ed:3d:1b:fe:4a:90:b1:03:d0:6c:41:f0:
                    8a:91:e0:89:42:b4:ef:cf:38:64:30:16:bd:44:cb:
                    13:93:bc:d6:98:c0:d7:f3:00:9a:46:24:b0:78:52:
                    ec:3c:50:a3:0f:75:52:37:fb:29:e7:c2:dc:e4:26:
                    f5:80:34:e6:68:a6:3b:92:6d:d0:c2:ae:64:90:15:
                    5c:92:d8:00:e2:aa:44:cb:fa:3a:5f:76:c2:3d:56:
                    55:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4E:A0:3A:F0:9E:41:2C:B3:1F:B3:7F:E4:B3:0A:FD:5D:DA:CE:D0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/efa137a3-f549-40e6-beab-f4d280b76674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:b4:f4:fc:55:48:75:9a:54:12:79:74:ee:9f:04:75:66:0a:
         a9:3a:99:5b:b1:6b:8a:cc:21:3a:72:66:32:a0:b0:bc:c9:d4:
         5e:f6:93:63:a0:ac:c7:2f:18:c1:85:da:f2:cf:3a:77:fe:af:
         8e:aa:6f:aa:fc:aa:d0:2e:c2:2f:41:9f:c5:b8:9a:fe:6f:4b:
         ce:f8:9f:8a:56:86:27:bd:7e:71:c6:4a:8c:56:c2:b0:01:28:
         0f:2a:9b:b0:aa:ff:0f:d0:d5:a0:f2:3f:5f:a5:88:f7:40:b9:
         84:7c:af:ee:15:7b:ba:cd:00:8e:5f:d3:27:68:cb:76:b8:a3:
         10:74:49:ec:9d:57:37:29:63:1b:47:4f:d2:1a:9f:dc:6f:bf:
         b6:67:ba:bb:6b:a3:c8:19:71:c3:83:c1:08:f6:c4:c1:5a:c5:
         4f:20:62:03:a5:53:7b:6b:d0:55:53:68:1e:fe:8f:4f:89:4d:
         e8:07:ad:bf:c1:dd:02:08:f9:d5:fa:d1:f3:b5:86:12:9a:46:
         aa:6e:1a:f5:42:78:3a:6d:5c:e0:2f:7b:23:13:ab:fb:b6:87:
         f8:27:44:10:23:50:98:62:f3:9d:d6:7c:a7:e8:07:7d:43:dc:
         1f:3a:93:0d:de:38:a9:68:4c:3e:a6:37:84:9d:f7:0a:c8:ae:
         fc:c2:ff:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:48:24 2025 by rpki-client