This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f71700bf-d67c-428b-87ca-e1e7ba18f9ef.roa
File:                     f71700bf-d67c-428b-87ca-e1e7ba18f9ef.roa (raw, json)
Hash identifier:          6NVOQ7mdZsg2Qdr2M1mUPG7n2yRgaK9cD/WK/YQ/fT0=
Subject key identifier:   9D:03:A4:0F:DA:C4:8C:14:04:47:83:76:6D:FD:B0:13:C7:01:51:90
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       4439AA324F29AED2C508A13C369F96CE5ED3E1E7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f71700bf-d67c-428b-87ca-e1e7ba18f9ef.roa
Signing time:             Thu 23 Nov 2023 00:00:00 +0000
ROA not before:           Thu 23 Nov 2023 00:00:00 +0000
ROA not after:            Thu 28 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:39:aa:32:4f:29:ae:d2:c5:08:a1:3c:36:9f:96:ce:5e:d3:e1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 23 00:00:00 2023 GMT
            Not After : Dec 28 23:59:59 2023 GMT
        Subject: serialNumber=b8e5186759620a3bc7aa5d92657ff3d493bfa61577f75d42c52afe04425510b7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:c8:3f:c4:bd:bf:a2:b8:c5:51:76:f3:19:
                    3c:52:d7:62:ba:18:81:39:0a:ba:7c:6d:48:4f:93:
                    3d:f9:b1:d0:10:2a:84:da:4a:08:a8:82:fe:5a:6a:
                    b5:80:69:b9:c3:97:0a:5a:a4:ff:ec:d2:af:12:12:
                    ed:07:b0:71:9b:c0:d0:b6:8f:59:1d:db:e5:f1:74:
                    63:65:0f:b2:e6:6f:f6:5a:34:a2:cf:ea:95:7a:e0:
                    24:0c:4d:db:be:a8:6d:61:5e:32:2c:f8:1d:31:c3:
                    a2:84:c7:c8:a5:3b:c4:77:e3:e5:24:41:10:94:70:
                    c7:06:d7:7a:fe:f1:ac:a7:73:2f:07:1d:dd:8b:1d:
                    c7:ed:45:30:95:6e:00:f0:fb:2f:4d:50:c7:c5:08:
                    72:d4:c7:5c:05:8c:57:bd:ff:57:ff:d4:91:e1:e8:
                    6e:6a:86:13:5f:79:56:9f:3f:eb:8a:c8:29:57:2f:
                    9d:f4:b1:07:c2:00:51:3c:46:b3:ae:1a:92:db:02:
                    ab:a7:76:4e:28:63:a9:ff:6b:d4:fd:d9:c2:78:1e:
                    02:4c:54:32:7e:3d:e6:e2:8e:52:78:b6:ae:e8:51:
                    25:99:ca:89:26:15:5f:73:87:e8:25:b6:57:a5:42:
                    bf:82:c7:1f:19:76:f4:7b:9e:ab:fe:c8:07:20:e0:
                    37:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:03:A4:0F:DA:C4:8C:14:04:47:83:76:6D:FD:B0:13:C7:01:51:90
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/f71700bf-d67c-428b-87ca-e1e7ba18f9ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:f4:5b:26:47:1c:0e:e9:fa:3c:d9:28:23:40:91:36:7b:cb:
         a2:5b:8d:85:62:b5:f5:9e:b0:66:41:d6:06:f8:d2:f3:6e:0a:
         63:23:6b:c3:0e:d9:0f:b1:a1:fb:d2:20:0c:f1:59:71:2d:06:
         88:63:62:ce:87:4f:e6:11:94:28:b9:5b:18:68:21:9e:b0:1c:
         2d:85:60:98:a6:fa:d9:d3:7b:40:cc:fc:dc:df:a3:02:98:c4:
         75:98:7d:3e:02:c9:46:32:71:d6:49:b8:b2:30:9e:0c:53:07:
         6d:7c:db:fb:df:10:45:42:6a:aa:be:c2:aa:e7:c0:4d:a1:57:
         a7:ed:e2:3d:98:be:6b:f4:68:bc:b1:c2:1c:4b:fd:e1:b9:39:
         b3:e9:41:29:33:12:18:5c:82:1b:9d:6d:47:98:6d:45:6c:62:
         e8:e0:c9:5c:69:8a:53:72:70:56:e3:85:28:ec:54:d4:24:bf:
         2d:fd:6c:8f:d5:a8:cc:dc:00:ee:f9:65:79:31:57:53:a0:27:
         1d:50:9a:03:9a:06:a2:7a:1b:25:36:26:59:7c:26:ec:f4:9d:
         59:3e:3d:3a:b4:2a:e7:74:a5:37:75:29:ff:78:84:5f:c9:d7:
         88:c4:75:82:c2:28:24:5d:bd:c0:a6:19:a4:42:46:a3:0f:a8:
         d4:e8:e9:d7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURDmqMk8prtLFCKE8Np+Wzl7T4ecwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjMxMTIzMDAwMDAwWhcNMjMxMjI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiOGU1MTg2NzU5NjIwYTNiYzdhYTVkOTI2NTdmZjNkNDkz
YmZhNjE1NzdmNzVkNDJjNTJhZmUwNDQyNTUxMGI3MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFrsg/xL2/orjFUXbzGTxS12K6GIE5Crp8bUhPkz35sdAQ
KoTaSgiogv5aarWAabnDlwpapP/s0q8SEu0HsHGbwNC2j1kd2+XxdGNlD7Lmb/Za
NKLP6pV64CQMTdu+qG1hXjIs+B0xw6KEx8ilO8R34+UkQRCUcMcG13r+8ayncy8H
Hd2LHcftRTCVbgDw+y9NUMfFCHLUx1wFjFe9/1f/1JHh6G5qhhNfeVafP+uKyClX
L530sQfCAFE8RrOuGpLbAqundk4oY6n/a9T92cJ4HgJMVDJ+PebijlJ4tq7oUSWZ
yokmFV9zh+gltlelQr+Cxx8ZdvR7nqv+yAcg4DcRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnQOkD9rEjBQER4N2bf2wE8cBUZAwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2Y3MTcwMGJmLWQ2N2MtNDI4Yi04N2NhLWUxZTdiYTE4ZjllZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAIH0WyZHHA7p+jzZKCNAkTZ7y6Jb
jYVitfWesGZB1gb40vNuCmMja8MO2Q+xofvSIAzxWXEtBohjYs6HT+YRlCi5Wxho
IZ6wHC2FYJim+tnTe0DM/NzfowKYxHWYfT4CyUYycdZJuLIwngxTB2182/vfEEVC
aqq+wqrnwE2hV6ft4j2Yvmv0aLyxwhxL/eG5ObPpQSkzEhhcghudbUeYbUVsYujg
yVxpilNycFbjhSjsVNQkvy39bI/VqMzcAO75ZXkxV1OgJx1QmgOaBqJ6GyU2Jll8
Juz0nVk+PTq0Kud0pTd1Kf94hF/J14jEdYLCKCRdvcCmGaRCRqMPqNTo6dc=
-----END CERTIFICATE-----