This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2567ae94-444e-49ec-986f-8446f79fafeb.roa
File:                     2567ae94-444e-49ec-986f-8446f79fafeb.roa (raw, json)
Hash identifier:          bOdZiGS7jbueaJ/fNS6eYTeX4oJB7PnA8a/DU5VF0I0=
Subject key identifier:   13:ED:C5:26:96:86:84:4A:5D:A8:D7:EE:4C:E2:ED:23:DC:77:70:F7
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       63E8B5E3EE8383BEBC3F7D13F7F9825DD74A008C
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2567ae94-444e-49ec-986f-8446f79fafeb.roa
Signing time:             Wed 18 Dec 2024 00:00:00 +0000
ROA not before:           Wed 18 Dec 2024 00:00:00 +0000
ROA not after:            Wed 22 Jan 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e8:b5:e3:ee:83:83:be:bc:3f:7d:13:f7:f9:82:5d:d7:4a:00:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 18 00:00:00 2024 GMT
            Not After : Jan 22 23:59:59 2025 GMT
        Subject: serialNumber=21f82187f1514cef7797a41ff49d0d725fe2c1b1a190dcdd5c83dce494579ca0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6a:fa:a4:27:c9:99:19:c3:e8:0e:d0:51:04:
                    d8:da:e4:ef:b4:33:a1:dd:bc:7a:5a:2f:bb:8c:79:
                    42:22:5a:af:a4:f4:19:cd:37:8a:11:cd:f6:9a:a5:
                    99:84:c6:04:fb:04:33:2e:32:fc:4f:15:d1:6e:91:
                    d3:4c:2d:c9:61:5b:56:6a:50:90:f4:b6:47:58:d9:
                    7a:6a:58:d0:b9:85:1a:2a:be:4c:86:f1:6d:1c:5e:
                    5c:51:20:70:68:61:57:66:4c:ad:5c:10:a6:c9:8f:
                    d0:8b:0c:29:90:70:ba:4f:86:87:20:bf:9a:dc:54:
                    8f:d1:fb:e7:88:4f:35:36:74:2a:68:84:72:76:55:
                    9e:c6:ef:e0:ed:a2:54:bd:f4:3d:cf:e9:8f:b6:15:
                    97:de:3c:4b:57:77:a9:1e:38:32:69:57:9d:35:7c:
                    44:73:f8:30:7d:32:5a:86:96:0a:94:87:28:83:b8:
                    6b:49:b7:dc:07:15:16:e4:f5:82:7e:ee:55:ba:a9:
                    d5:42:26:9c:c1:2c:b0:c5:a1:90:89:c2:23:f3:83:
                    a2:b7:64:c3:69:b5:5e:2e:79:bf:7b:4f:23:73:6e:
                    c0:9b:2b:65:1c:47:2c:bc:8c:de:db:21:bd:aa:7e:
                    67:47:e9:b0:11:d5:32:1e:c8:cc:7a:ff:db:0e:07:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:ED:C5:26:96:86:84:4A:5D:A8:D7:EE:4C:E2:ED:23:DC:77:70:F7
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2567ae94-444e-49ec-986f-8446f79fafeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:85:75:3b:5a:40:df:6f:f1:c6:e6:0a:95:a3:6f:91:c8:68:
         ab:27:4f:eb:2c:9b:27:94:5a:21:03:42:22:4e:80:e5:91:10:
         3d:0b:72:34:78:54:f1:d6:7d:d0:c6:f8:15:18:55:13:76:23:
         e4:ee:27:6f:39:b5:83:67:24:32:5d:7a:86:ec:a8:6f:bf:48:
         e8:0e:27:e5:04:82:44:64:c0:22:c7:29:4b:0e:e5:1b:02:5d:
         7b:8b:bb:a3:e7:b7:2b:34:51:68:bc:11:bf:5c:e2:10:fc:4c:
         e4:25:8d:92:b4:4f:0e:5b:6e:75:bc:02:b4:3e:7d:ee:f8:9a:
         f1:79:ee:43:46:b0:4c:dc:dc:b7:27:b9:fd:81:07:e2:cd:bf:
         fc:21:40:90:3b:41:62:69:58:f1:c2:b6:b1:72:8b:51:1d:44:
         04:b4:66:4e:ce:3d:a4:e6:b0:b2:9f:91:04:ae:28:ca:c9:86:
         78:5c:73:43:eb:ce:9f:05:59:40:58:c0:57:be:7d:09:ce:5c:
         e7:85:af:a0:9c:52:9a:b4:d7:08:48:bc:64:d5:e1:c5:b4:c3:
         9c:11:54:aa:d2:84:97:97:cb:ae:09:8c:48:c1:31:64:16:05:
         aa:8a:64:ef:7b:d7:e5:98:ee:b6:7d:4c:15:f3:61:a8:e5:33:
         77:67:9d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----