This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c0b039f-f0ec-4cd0-b38b-a4401a88a447.roa
File:                     1c0b039f-f0ec-4cd0-b38b-a4401a88a447.roa (raw, json)
Hash identifier:          e+GHZAXd0Qui8VtH0h4cXUS4aKUiRembGtnuNVBGdU4=
Subject key identifier:   69:3E:1A:3C:EC:11:A9:18:96:00:DF:A0:E7:25:A6:62:43:D9:30:13
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       14EA6B0A9F22C6D9FA77948A53E24067A98DE6D7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c0b039f-f0ec-4cd0-b38b-a4401a88a447.roa
Signing time:             Mon 19 May 2025 13:48:18 +0000
ROA not before:           Mon 19 May 2025 13:48:18 +0000
ROA not after:            Mon 23 Jun 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ea:6b:0a:9f:22:c6:d9:fa:77:94:8a:53:e2:40:67:a9:8d:e6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: May 19 13:48:18 2025 GMT
            Not After : Jun 23 23:59:59 2025 GMT
        Subject: serialNumber=8a3e8af016163697c08392aaef588795a92db581dcaab0eaac62931316b12908, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:82:75:c0:4a:e7:46:84:f4:c5:82:ef:6b:
                    47:c1:8a:5e:56:da:06:00:7f:c6:42:a9:d7:52:00:
                    2c:1f:42:61:6c:14:60:37:ee:74:d1:76:fb:66:47:
                    25:15:cc:7c:15:c2:06:32:91:c7:0d:38:b4:08:a4:
                    ae:3a:b0:9c:c6:3c:c0:59:be:60:f9:34:f9:4d:40:
                    bb:a9:42:67:f0:ea:55:1a:bc:9b:bf:ec:7e:6d:86:
                    ab:c9:fa:88:1e:ea:c1:c3:30:aa:44:68:61:00:92:
                    79:a5:0b:26:38:15:75:20:5b:26:f3:e4:c0:7d:ca:
                    56:1c:84:35:18:08:62:79:21:ae:84:cb:b0:bb:86:
                    27:d8:96:1f:d8:8a:9b:3a:4d:10:24:a1:e5:0a:f6:
                    53:52:53:0a:61:ca:57:5f:a7:00:04:f3:ec:0b:92:
                    6f:1d:4b:bc:40:40:4a:d4:7d:b4:7e:39:d6:d5:53:
                    10:2d:a6:b3:5a:b6:39:fc:43:8f:04:ef:19:58:df:
                    03:89:99:93:30:66:1b:05:9b:1f:49:f7:54:e2:ab:
                    a9:50:b0:f2:f5:22:6b:0f:d0:64:60:a4:48:27:15:
                    49:7c:bf:0c:3a:cd:6c:07:2c:fe:89:3a:6f:48:d7:
                    cf:22:e6:b0:83:24:69:d0:d7:72:73:fa:81:de:cc:
                    b7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3E:1A:3C:EC:11:A9:18:96:00:DF:A0:E7:25:A6:62:43:D9:30:13
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/1c0b039f-f0ec-4cd0-b38b-a4401a88a447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:5c:1a:d3:d0:a7:da:5d:bb:4a:75:9d:72:02:23:6f:0f:27:
         22:36:1e:72:9c:5d:74:4a:a1:4f:0c:71:1a:c9:9e:93:a4:a1:
         a7:b0:bd:64:3e:4e:d8:2b:1f:9f:2d:52:eb:9d:d9:77:94:3d:
         8d:7b:c7:c7:16:e9:51:e9:53:91:9c:f6:de:43:28:ea:6c:78:
         3c:d5:33:c4:70:42:90:88:6d:a7:f3:fb:f8:d6:e0:64:38:c1:
         54:ea:93:7d:81:ec:75:f8:4e:b6:c5:5e:ba:47:5f:2d:63:8e:
         8f:98:0a:90:f7:e7:91:ba:07:7a:d1:fe:8c:56:fd:7a:61:dd:
         61:d5:72:35:61:d7:2a:07:c2:b8:38:ea:ef:55:45:66:5e:23:
         09:4e:dd:bf:99:be:fd:5b:90:b5:82:79:77:7d:89:44:0b:6e:
         0d:10:91:58:41:b7:5b:9f:76:5f:9b:fd:a6:6b:74:09:29:60:
         6b:bd:d7:06:e5:25:73:c5:50:3b:a6:a6:96:db:0c:fa:3d:49:
         72:14:31:af:3f:ef:6d:6c:15:c1:7f:ec:c8:73:ac:03:7f:62:
         a7:49:81:44:3d:94:3d:8c:87:00:ef:be:d4:61:0c:17:7a:92:
         3c:b7:d8:16:bc:6e:f2:03:ef:6c:15:d5:17:17:52:1a:32:e6:
         64:03:b6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----