This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/21562432-d232-43fb-9cba-1af9238548dc.roa
File:                     21562432-d232-43fb-9cba-1af9238548dc.roa (raw, json)
Hash identifier:          Wb1TlbWmC5dHRuo3vGAwvL+3ZnzaPTtKKgXRl8+fzC8=
Subject key identifier:   52:FE:37:36:CE:F8:26:18:09:EE:DA:19:8C:71:72:F5:EC:BE:67:95
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       3DEBC267A664476387338F4FF7ADAC0675DC2A31
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/21562432-d232-43fb-9cba-1af9238548dc.roa
Signing time:             Fri 14 Jul 2023 00:00:00 +0000
ROA not before:           Fri 14 Jul 2023 00:00:00 +0000
ROA not after:            Fri 18 Aug 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:eb:c2:67:a6:64:47:63:87:33:8f:4f:f7:ad:ac:06:75:dc:2a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 14 00:00:00 2023 GMT
            Not After : Aug 18 23:59:59 2023 GMT
        Subject: serialNumber=fdcc73a01b5e9d5d4368019f1d1e77f4882ba4c277cbbba097d4fc5809214cef, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:f5:2d:b4:af:26:0b:a7:32:01:c4:2a:9b:
                    b9:8a:02:fd:f1:34:0a:66:d8:a7:0f:d8:0d:23:a0:
                    6e:41:a1:5e:16:75:7a:d0:37:48:8b:51:e1:e8:92:
                    4a:00:6f:bd:d8:2d:a0:32:81:98:4c:28:ad:8f:25:
                    9d:6c:2e:40:be:63:1c:16:14:34:fb:ce:2d:fa:b4:
                    16:8f:21:af:67:d8:51:e1:3e:ff:03:eb:36:f4:04:
                    35:53:40:71:5e:25:de:2c:e2:50:36:7f:83:45:b7:
                    d3:ad:98:58:14:01:35:f2:8c:63:db:ee:20:07:e1:
                    6a:0d:45:12:a0:49:d4:3b:5a:34:62:b0:45:fe:29:
                    52:c5:86:95:5f:09:c1:6b:d4:7e:58:37:51:72:ee:
                    c4:d5:ae:d2:29:7a:b7:b1:e2:0d:c4:36:dc:51:f0:
                    1f:32:fb:d7:bd:d4:b4:5c:a3:5a:a2:fa:51:3a:30:
                    1e:77:a0:f2:ce:3d:1f:83:42:dc:51:e7:73:46:d8:
                    e5:2c:23:86:3f:2d:ba:9c:4c:ac:6e:90:8a:1c:6d:
                    fb:9d:0d:82:78:e4:45:ce:5c:d6:25:df:13:b9:93:
                    ae:f9:7e:7a:01:60:43:42:f0:04:fb:96:c6:72:82:
                    15:38:bb:10:99:77:64:fa:9e:26:e6:75:69:9b:d6:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FE:37:36:CE:F8:26:18:09:EE:DA:19:8C:71:72:F5:EC:BE:67:95
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/21562432-d232-43fb-9cba-1af9238548dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:fa:2b:bb:c5:2e:fb:23:09:1e:d9:9c:7f:58:a9:e3:2d:40:
         cb:34:b8:f6:9f:fc:12:0a:aa:cb:84:80:40:6c:e5:4a:fe:5a:
         78:ad:08:92:07:d0:c6:87:a2:af:db:d5:81:7e:05:9c:31:09:
         bd:2e:ba:1a:67:11:03:65:f8:1b:37:17:9d:8c:fb:cd:32:eb:
         e3:9e:d4:96:98:28:0e:4e:a0:43:a0:31:56:e0:29:0b:85:f9:
         47:79:ed:3e:88:a8:24:49:8c:30:71:46:67:1a:3c:d4:d0:56:
         86:69:ec:c5:eb:bc:09:e7:cf:29:c6:05:d1:45:0f:e9:89:d4:
         1d:72:9b:86:96:34:b5:d6:a7:35:7e:5c:a2:83:bc:cd:8a:38:
         cd:f9:16:3b:a6:72:e3:53:35:d3:a6:c2:0e:29:25:f2:17:17:
         a2:4f:7d:e2:01:fa:fc:7e:5c:5c:8b:a7:19:e7:f8:29:d4:97:
         95:c0:14:72:6b:24:60:a9:ee:d8:f4:20:d9:04:8b:7c:04:66:
         1f:0e:35:bf:1e:0f:56:d7:7a:4f:e3:23:ba:4e:55:54:97:62:
         b8:13:6a:ab:64:e7:e8:d3:58:8e:f1:44:71:7d:f1:f1:8f:5b:
         b6:68:1c:0c:5c:23:79:1a:74:00:fc:d2:e0:bf:d3:9e:a6:ac:
         8f:a1:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----