This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd776fc7-0a03-4021-9de3-9a256b05e643.roa
File:                     fd776fc7-0a03-4021-9de3-9a256b05e643.roa (raw, json)
Hash identifier:          rydwTth9g+z+HYokrU+SfYCfbppErN4An2pEKvoneHs=
Subject key identifier:   B6:2A:E4:65:0A:3E:BC:9B:8F:CA:9D:3A:DF:5C:15:CF:5B:62:6A:62
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5D27BA9FEBC1C06C939E4A513F02411431B6C28C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd776fc7-0a03-4021-9de3-9a256b05e643.roa
Signing time:             Sat 22 Feb 2025 09:53:21 +0000
ROA not before:           Sat 22 Feb 2025 09:53:21 +0000
ROA not after:            Sat 29 Mar 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:27:ba:9f:eb:c1:c0:6c:93:9e:4a:51:3f:02:41:14:31:b6:c2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb 22 09:53:21 2025 GMT
            Not After : Mar 29 23:59:59 2025 GMT
        Subject: serialNumber=41f1423ab7f9f997938a98475c610e4f9a841c8042387a74273d85b4d75b8334, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ac:bc:58:c6:d5:8b:cb:5d:8b:c6:64:bd:7f:
                    f4:7c:f0:53:26:34:2a:bd:ba:d7:f2:2e:12:96:48:
                    94:35:a9:63:23:d4:93:a2:3d:58:b9:0b:39:f3:37:
                    0d:eb:8c:f1:81:93:c0:ce:0b:5e:8c:bf:30:92:30:
                    fb:1d:da:04:49:94:45:fc:f5:7d:50:01:62:ef:89:
                    5b:82:c9:64:ec:d5:2d:55:f2:3f:28:c3:5b:d0:e6:
                    5c:d8:f9:51:c6:f8:a8:2a:19:dc:ed:b1:68:46:af:
                    3d:e2:2c:51:6e:f6:ec:29:29:e6:7d:7f:d6:6f:d2:
                    bd:3f:eb:59:9c:7c:a1:1f:aa:ce:0e:4f:14:43:50:
                    ea:c8:99:56:8b:a2:5d:7e:c6:70:bb:2a:da:80:cf:
                    7f:94:89:af:e9:90:9f:03:b3:36:5e:96:c1:b2:16:
                    42:f2:e0:e1:06:c9:e7:ca:45:66:82:a5:99:d8:02:
                    bc:6c:97:f0:46:5c:a6:c0:e5:10:0d:f6:50:7f:77:
                    6e:7b:57:99:2f:fd:69:c8:3b:4b:79:42:bd:e7:21:
                    69:99:ef:3c:85:60:3e:da:26:6c:6d:d4:2e:54:37:
                    7f:de:5c:a3:c9:9f:4b:6d:37:e9:ca:77:2d:79:04:
                    4d:29:4f:93:cd:8b:d3:18:4e:65:a9:80:75:77:2c:
                    11:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2A:E4:65:0A:3E:BC:9B:8F:CA:9D:3A:DF:5C:15:CF:5B:62:6A:62
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/fd776fc7-0a03-4021-9de3-9a256b05e643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:34:04:00:69:43:f8:fd:72:c6:4f:72:ba:8f:49:89:2a:b6:
         11:a5:9a:de:1c:bd:a0:dd:c3:71:5c:f9:ab:31:af:98:00:ab:
         e3:cb:cc:ed:0b:3d:06:d5:ed:0b:b3:51:fd:fb:c9:84:0f:2b:
         c5:93:39:fb:45:fe:dd:43:03:97:1a:01:b6:2a:4d:ed:20:c1:
         f5:4e:92:0b:e3:7b:55:4c:83:8c:e4:96:14:75:37:c5:76:9f:
         fb:0c:5b:be:d2:87:31:59:11:07:f7:6c:f6:71:8a:03:2c:22:
         5a:49:ec:16:d1:70:1b:2b:d6:08:b8:0d:62:e3:bf:77:50:bf:
         eb:1a:0a:18:8f:83:ce:86:8f:7f:ee:35:94:13:79:c5:90:c0:
         f6:b5:3b:60:c0:3d:2d:38:9c:34:2b:e0:7b:07:f1:58:f5:8b:
         82:0f:29:2c:17:c4:b9:2f:21:a8:cf:f4:cb:f8:4f:96:76:b2:
         73:7e:89:20:69:28:85:3a:a3:d1:54:81:86:ee:5b:7e:5b:61:
         6b:52:99:c0:46:76:62:6d:54:5e:6f:66:9d:e6:7d:0e:4a:1d:
         57:ea:49:7a:b4:3c:13:3f:4f:d3:58:fe:ae:74:fe:39:8e:6d:
         eb:06:bb:b7:1a:f8:54:44:dc:16:4a:bd:8b:36:ca:90:e9:36:
         54:9f:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----