This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0171d7f0-48d3-4a47-9e3a-33ad2d16d660.roa
File:                     0171d7f0-48d3-4a47-9e3a-33ad2d16d660.roa (raw, json)
Hash identifier:          WNT1NhqkJD/ESINboen56SSM4HvID60ep4d903juAYY=
Subject key identifier:   FD:E3:89:CD:95:C3:1C:DB:BC:A0:BD:94:C1:1E:BA:84:2C:56:2B:40
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       7F8C0F41D061F129416E06F369A6AFE4139461C5
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0171d7f0-48d3-4a47-9e3a-33ad2d16d660.roa
Signing time:             Sun 04 Feb 2024 00:00:00 +0000
ROA not before:           Sun 04 Feb 2024 00:00:00 +0000
ROA not after:            Sun 10 Mar 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8c:0f:41:d0:61:f1:29:41:6e:06:f3:69:a6:af:e4:13:94:61:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Feb  4 00:00:00 2024 GMT
            Not After : Mar 10 23:59:59 2024 GMT
        Subject: serialNumber=7eb54e09c3d392d51e9156db93862b1a07b07e4b9df7afead3778f9e9c247ee1, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:d2:dd:38:c9:20:8a:83:d9:01:ef:fa:e3:
                    a0:b0:15:92:d2:fd:46:72:d8:1b:57:54:6f:f7:06:
                    85:84:58:e3:80:57:57:a1:cf:c7:67:31:eb:f2:96:
                    6a:b9:0e:42:c6:f3:88:74:e2:ef:d1:f1:02:2f:18:
                    e2:5f:ff:01:8c:6e:cb:8e:6a:76:34:dc:7a:1b:72:
                    c6:d8:e4:e4:61:02:fa:6b:82:1f:14:56:19:d9:25:
                    d0:2a:cd:91:36:40:11:57:4c:fb:f5:36:59:3d:b4:
                    ac:7d:d5:a9:59:09:78:19:f8:d7:d4:5c:1f:14:16:
                    47:18:59:23:90:22:23:9c:12:8e:78:1c:04:b6:a2:
                    c1:6b:2d:4e:98:9c:5b:e5:64:d0:fd:db:a7:3f:b6:
                    79:c4:94:61:67:d1:b6:f1:bf:31:1f:5c:8d:ad:c1:
                    00:1f:1b:ac:4f:08:4e:78:b7:f6:16:18:cd:0c:8f:
                    69:67:d5:8e:46:be:9e:7d:94:06:14:d6:9d:87:8d:
                    91:84:3a:c4:31:af:5f:b6:96:17:2f:55:f8:76:20:
                    47:66:73:3e:17:a6:91:77:ea:6f:4b:33:b0:d2:63:
                    d7:b8:d3:78:81:f6:7b:db:44:d5:1e:47:28:f3:03:
                    a3:cd:bc:9d:45:19:00:47:6d:f5:47:73:c9:5b:b9:
                    fd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E3:89:CD:95:C3:1C:DB:BC:A0:BD:94:C1:1E:BA:84:2C:56:2B:40
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/0171d7f0-48d3-4a47-9e3a-33ad2d16d660.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:04:cc:8a:bf:dc:76:ae:55:30:19:f8:25:82:fd:ae:76:c5:
         9f:cf:9b:95:44:ea:2e:58:fb:ee:9f:cd:74:fa:09:fa:b1:de:
         34:75:4e:40:78:f0:6e:3e:63:7a:f7:5e:0e:73:6a:78:bb:75:
         11:55:c2:ff:63:f4:ab:d2:34:40:4f:b5:c0:86:32:e7:38:97:
         5f:45:7d:40:9f:39:d2:9f:73:ab:e1:2b:a5:d5:2d:2d:66:9c:
         0f:3e:6e:2c:88:49:77:1d:29:36:74:a4:27:19:00:9b:6a:4f:
         8c:68:a7:4a:26:08:04:d1:ec:cb:a6:56:20:01:01:cf:64:68:
         7e:8b:ff:89:cb:3d:0d:e4:73:78:53:83:1c:86:55:dc:e8:81:
         c9:ba:2a:ce:d8:19:0b:ec:da:cb:2b:5b:93:b6:c1:e6:8e:ee:
         aa:54:24:21:74:0d:d5:4c:c9:10:d6:69:c1:f2:09:a4:20:97:
         5b:4f:8e:a1:f6:95:e1:c8:a3:20:ba:44:95:e8:5e:67:5c:8c:
         ff:a9:66:0c:70:9d:e5:1e:0d:1b:44:2a:e9:d4:ac:9c:62:f1:
         a7:16:55:0d:d3:8b:60:6f:a3:ea:fc:be:64:d9:e4:64:d4:84:
         4a:35:81:fa:f5:79:61:0c:d0:68:cc:e3:17:33:62:9a:42:73:
         84:e9:b8:4c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUf4wPQdBh8SlBbgbzaaav5BOUYcUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMjA0MDAwMDAwWhcNMjQwMzEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZWI1NGUwOWMzZDM5MmQ1MWU5MTU2ZGI5Mzg2MmIxYTA3
YjA3ZTRiOWRmN2FmZWFkMzc3OGY5ZTljMjQ3ZWUxMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIHdLdOMkgioPZAe/646CwFZLS/UZy2BtXVG/3BoWEWOOA
V1ehz8dnMevylmq5DkLG84h04u/R8QIvGOJf/wGMbsuOanY03HobcsbY5ORhAvpr
gh8UVhnZJdAqzZE2QBFXTPv1Nlk9tKx91alZCXgZ+NfUXB8UFkcYWSOQIiOcEo54
HAS2osFrLU6YnFvlZND926c/tnnElGFn0bbxvzEfXI2twQAfG6xPCE54t/YWGM0M
j2ln1Y5Gvp59lAYU1p2HjZGEOsQxr1+2lhcvVfh2IEdmcz4XppF36m9LM7DSY9e4
03iB9nvbRNUeRyjzA6PNvJ1FGQBHbfVHc8lbuf3NAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU/eOJzZXDHNu8oL2UwR66hCxWK0AwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2LzAxNzFkN2YwLTQ4ZDMtNGE0Ny05ZTNhLTMzYWQyZDE2ZDY2MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAJkEzIq/3HauVTAZ+CWC/a52xZ/P
m5VE6i5Y++6fzXT6Cfqx3jR1TkB48G4+Y3r3Xg5zani7dRFVwv9j9KvSNEBPtcCG
Muc4l19FfUCfOdKfc6vhK6XVLS1mnA8+biyISXcdKTZ0pCcZAJtqT4xop0omCATR
7MumViABAc9kaH6L/4nLPQ3kc3hTgxyGVdzogcm6Ks7YGQvs2ssrW5O2weaO7qpU
JCF0DdVMyRDWacHyCaQgl1tPjqH2leHIoyC6RJXoXmdcjP+pZgxwneUeDRtEKunU
rJxi8acWVQ3Ti2Bvo+r8vmTZ5GTUhEo1gfr1eWEM0GjM4xczYppCc4TpuEw=
-----END CERTIFICATE-----