This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2acf630a-6188-4d31-91d1-8d5547dc10e1.roa
File:                     2acf630a-6188-4d31-91d1-8d5547dc10e1.roa (raw, json)
Hash identifier:          2d024E64IbilkdMrtzorGu7ftnrduQzeDfM1LBuQTjk=
Subject key identifier:   7F:A1:EC:0A:7D:9C:A5:E8:E1:4B:DA:82:51:C6:C9:9D:2B:66:39:C0
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       17C96B1D948CD450D05E0C306A892849711C6844
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2acf630a-6188-4d31-91d1-8d5547dc10e1.roa
Signing time:             Thu 24 Aug 2023 00:00:00 +0000
ROA not before:           Thu 24 Aug 2023 00:00:00 +0000
ROA not after:            Thu 28 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c9:6b:1d:94:8c:d4:50:d0:5e:0c:30:6a:89:28:49:71:1c:68:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug 24 00:00:00 2023 GMT
            Not After : Sep 28 23:59:59 2023 GMT
        Subject: serialNumber=dab3717e3f542b61dfd990464871fccce24fcc1f2793e5d7455b95a3a652c65c, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5a:92:b9:67:b8:44:23:08:95:5c:56:88:73:
                    6d:40:ed:8d:d6:7f:e2:46:8d:1b:37:36:e7:67:d0:
                    9a:92:67:a2:b7:b8:56:d0:79:ba:dd:f4:61:70:8e:
                    87:85:13:e6:e9:3a:15:25:3d:06:84:80:0a:f5:20:
                    b6:a6:4f:b4:3c:f1:5a:98:31:f3:b7:75:ce:da:30:
                    d1:87:39:45:bc:9c:ca:77:d8:39:52:7f:b2:34:19:
                    bc:99:98:87:30:44:00:1f:4f:d5:bd:80:2f:09:a0:
                    02:57:61:b4:fe:60:85:62:89:f2:ef:99:36:08:6b:
                    18:26:7d:ea:89:4c:f1:d0:5b:b7:2b:5b:bd:a7:fc:
                    78:02:6d:d1:11:40:fa:80:48:ec:40:2e:dd:7b:97:
                    a2:4c:5a:a0:1d:d1:f2:cc:1a:f7:54:34:ef:cf:f0:
                    84:29:e8:28:37:4f:f3:1f:c0:b2:0b:ae:56:cb:a3:
                    09:c0:fb:54:08:f4:54:47:89:8c:c3:aa:ff:b7:08:
                    b2:3f:ce:12:21:f6:05:3d:02:cd:51:ec:68:27:3e:
                    e9:23:b8:0e:04:36:22:02:c6:1e:3a:a2:48:ea:9a:
                    58:cd:1f:e9:5f:f4:a0:0d:45:d7:7d:9b:c6:9e:1a:
                    55:6c:47:ce:e1:c6:b8:f5:1f:31:bd:20:e2:cd:7b:
                    51:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A1:EC:0A:7D:9C:A5:E8:E1:4B:DA:82:51:C6:C9:9D:2B:66:39:C0
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/2acf630a-6188-4d31-91d1-8d5547dc10e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:09:35:aa:75:1b:0e:bb:72:db:1a:fb:aa:5d:a0:b9:9d:c0:
         46:75:ab:f5:f9:f1:a3:f1:75:8b:75:09:9b:08:18:e1:a3:90:
         e2:3d:98:13:4a:a2:d4:0d:ce:b0:82:4b:6d:2a:93:e0:5d:ad:
         4d:37:8a:6a:43:9b:d0:42:c6:7b:5e:e2:48:a5:b7:c2:91:ac:
         6c:e9:ea:04:60:42:fa:78:9b:0f:25:0f:0a:17:98:08:13:d8:
         dc:c6:80:d1:c5:63:26:6d:ae:67:e8:a2:e9:03:88:c5:46:7e:
         95:7f:a9:1c:a6:05:0b:0a:f7:b9:03:a5:e7:4f:53:2f:24:77:
         aa:74:b4:da:e6:0d:db:b5:24:a0:50:5c:01:4c:db:70:a5:18:
         43:c3:9b:39:fb:37:02:ca:7a:8d:ba:1c:17:de:85:21:52:ca:
         22:43:92:64:2f:23:b6:e1:5e:3d:ac:26:47:95:85:ff:4f:2a:
         d8:4c:5b:ee:c5:8c:ac:c2:44:65:84:20:17:df:4d:30:ea:37:
         fd:d4:0e:d2:54:e1:f7:d8:82:e9:0b:0f:ce:6e:9c:49:f5:74:
         51:0b:20:63:fe:a3:20:37:96:5c:f5:89:c2:d4:b5:40:93:39:
         ae:1e:d4:e1:ff:a3:23:78:9b:03:78:66:74:b2:ed:07:b0:f3:
         e0:31:43:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----