This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/20eae220-9321-4d49-adcc-264ab4601256.roa
File:                     20eae220-9321-4d49-adcc-264ab4601256.roa (raw, json)
Hash identifier:          W2dxhC/zhQkWvdi8hzoW2jwtu3lmdploIMABh4/rcdU=
Subject key identifier:   6C:7E:91:58:A8:A2:21:C6:DB:EC:58:23:6F:6C:C0:A9:13:06:80:59
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       01C28299F33DE9EA215A19202FAADCB5AD774FD8
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/20eae220-9321-4d49-adcc-264ab4601256.roa
Signing time:             Tue 29 Apr 2025 16:38:18 +0000
ROA not before:           Tue 29 Apr 2025 16:38:18 +0000
ROA not after:            Tue 03 Jun 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c2:82:99:f3:3d:e9:ea:21:5a:19:20:2f:aa:dc:b5:ad:77:4f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Apr 29 16:38:18 2025 GMT
            Not After : Jun  3 23:59:59 2025 GMT
        Subject: serialNumber=c10244299878747cc86d3aed93657af368ea510c7c61f346d13368d2439bfb81, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:4d:9c:b5:fd:c3:c6:b4:e1:e4:39:31:c1:
                    cc:74:ca:b7:36:3e:b9:6f:62:27:85:5c:9e:c6:87:
                    af:80:17:ec:c2:2b:80:4e:0c:3d:b3:ac:97:70:19:
                    01:51:86:6e:77:41:5d:0e:39:57:16:e3:5f:98:e0:
                    1d:39:bf:e5:bd:6b:9a:74:fe:b3:28:a6:e1:4f:17:
                    d5:13:08:57:67:7b:11:17:48:3d:56:3a:32:83:d1:
                    7e:eb:91:97:93:13:7d:35:4d:77:3d:0f:5c:52:7f:
                    92:1c:2a:ae:27:1d:19:12:ad:8a:9b:a0:17:17:ae:
                    af:d6:89:b5:f9:90:3e:09:b3:a5:3e:27:51:a0:af:
                    63:b5:1c:4e:9a:94:e9:f6:bf:55:00:9f:da:ec:65:
                    68:99:6b:b4:33:60:20:96:47:3e:70:5f:5f:20:3a:
                    52:73:6a:73:c9:05:87:e1:32:5d:87:10:ad:41:1a:
                    f0:0c:f2:4f:03:bb:8e:64:e5:f5:a8:db:9b:7b:98:
                    5f:cd:27:88:19:51:bc:3c:26:51:f6:7c:ca:28:c1:
                    1f:03:ba:ea:26:c1:36:49:0b:29:5b:7f:cf:4f:e7:
                    f8:d4:6a:50:4e:e2:07:c0:49:bf:34:13:7e:83:77:
                    65:fe:6d:f8:69:b7:32:22:e7:c5:33:79:26:bb:99:
                    34:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7E:91:58:A8:A2:21:C6:DB:EC:58:23:6F:6C:C0:A9:13:06:80:59
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/20eae220-9321-4d49-adcc-264ab4601256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:9a:4d:5d:fb:d4:a7:87:cc:9f:05:47:b8:38:86:ae:e3:bc:
         0a:61:4e:ae:3e:44:cd:d1:d1:90:f3:3a:e1:6a:72:30:8b:69:
         b2:33:ad:11:b1:6e:70:09:27:9b:45:4e:f3:c0:b4:3d:d0:78:
         ee:5b:44:85:6b:e9:ed:a7:f0:72:d1:45:58:59:e8:33:05:03:
         9b:fa:bd:65:4f:16:89:20:c5:d7:33:ec:f8:27:29:10:e6:b6:
         33:e0:e3:90:24:9c:97:46:1d:ab:2e:b6:64:92:61:de:51:94:
         92:a8:4e:cc:bf:96:0c:93:fe:54:20:64:fc:99:f5:0e:7a:fb:
         53:6e:cb:4e:73:03:5f:36:b5:36:e0:b6:6d:dd:1b:fe:c5:b4:
         f5:bc:f2:4f:b8:d5:58:ef:85:f0:ba:40:20:52:b9:b3:e3:15:
         5a:3a:52:d9:90:6d:ab:89:07:17:98:6d:96:76:a2:7c:49:56:
         97:0b:9f:71:18:eb:87:95:23:28:33:60:a8:80:9b:ec:da:1f:
         4d:a2:fd:c7:65:73:8a:ae:4b:1a:22:f8:83:5f:24:8b:5a:f9:
         38:5f:22:34:8f:9e:3e:17:94:eb:54:b0:ca:82:50:26:b3:d5:
         2b:8f:82:3f:94:d6:c7:db:f4:bb:1a:61:51:34:a8:19:71:0d:
         8c:aa:f4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----