This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a1af5db-a0e0-40ec-8c68-24bca5baae61.roa
File:                     3a1af5db-a0e0-40ec-8c68-24bca5baae61.roa (raw, json)
Hash identifier:          3K5Nv9eResNg1eXvnD9qktce7iIHdLuNjwb60oa3Tmw=
Subject key identifier:   76:94:E2:68:83:FF:A3:3B:96:4B:CF:1A:F0:90:B1:63:B8:34:83:C3
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       24C8F7A5DBF9B6A064AD08BA00B203584B849E
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a1af5db-a0e0-40ec-8c68-24bca5baae61.roa
Signing time:             Mon 25 Nov 2024 00:00:00 +0000
ROA not before:           Mon 25 Nov 2024 00:00:00 +0000
ROA not after:            Mon 30 Dec 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c8:f7:a5:db:f9:b6:a0:64:ad:08:ba:00:b2:03:58:4b:84:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 25 00:00:00 2024 GMT
            Not After : Dec 30 23:59:59 2024 GMT
        Subject: serialNumber=1299da2c3a57ff5513a21c1bb50a541a104c88d99ac0a6636d0461e05df101c0, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:09:74:46:06:6e:9a:9b:66:3b:c9:9c:8a:
                    c7:97:d3:86:80:ad:55:9d:76:cd:7e:48:f0:3c:19:
                    2c:23:55:16:04:cd:9a:9c:c7:1e:6e:3e:00:f5:6e:
                    0e:0c:02:f5:69:11:8a:1a:be:7d:e4:cb:ea:fc:53:
                    ce:e5:a3:ca:11:41:ef:f5:13:3c:02:6e:5d:e2:d1:
                    cd:3a:b8:c8:4b:b8:a7:52:96:0c:33:be:6a:b3:51:
                    b0:63:e6:d3:ba:22:9e:ca:9e:51:bb:a6:d8:2a:b1:
                    e3:e9:10:e9:e4:84:78:d4:35:be:5b:80:56:94:26:
                    72:9b:98:0c:1c:4a:77:73:fc:d8:50:66:3b:5d:61:
                    9a:c0:d7:91:00:2c:b6:d8:4d:5f:ba:f8:2b:2b:ee:
                    50:82:13:81:5c:67:1c:08:3c:b3:f1:ea:02:47:b9:
                    5f:a0:21:ce:bc:ec:19:b5:b6:f0:c2:83:ed:aa:b8:
                    c7:d0:c1:2c:58:43:7f:c6:bc:d6:88:ac:54:94:b2:
                    cc:32:d3:ed:d4:81:74:d0:38:cf:80:20:fc:b4:a4:
                    e3:7b:95:7e:ca:51:ba:ea:59:e9:aa:82:e0:f8:ce:
                    47:08:78:f0:f0:e8:cc:4e:a3:44:96:dd:85:fa:4a:
                    69:84:3d:e8:cc:cd:1e:9f:f7:8b:21:32:4c:ef:1d:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:94:E2:68:83:FF:A3:3B:96:4B:CF:1A:F0:90:B1:63:B8:34:83:C3
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/3a1af5db-a0e0-40ec-8c68-24bca5baae61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:89:ce:f2:01:16:5c:20:ab:65:c8:d7:7d:91:48:c5:96:46:
         0a:80:01:e9:82:33:6a:11:2a:2e:03:98:03:a5:fb:ab:a7:8a:
         57:39:9e:5c:48:87:35:8c:2a:b4:c5:c2:d6:bf:a9:b9:b5:58:
         00:f1:cb:6b:77:c2:e6:8e:05:1e:cd:0d:2a:c1:9c:65:8c:77:
         25:f8:48:fc:f1:06:14:be:0e:12:3c:ec:46:e8:dd:82:1d:c6:
         cc:d8:82:ce:f4:a0:a6:7b:7d:46:db:4d:86:50:5d:fa:74:26:
         e0:0c:9c:63:cb:be:c7:1b:f3:09:a3:7d:7a:08:d5:61:4d:e5:
         4f:d4:59:f4:50:e9:a6:04:12:9b:c1:ae:9b:e9:b4:db:1e:dc:
         dd:39:9f:5d:d7:46:d5:d5:9c:a7:b4:24:fc:83:a7:49:a6:75:
         d7:b0:31:6b:a7:54:ed:2d:55:2a:66:76:4b:d9:e9:eb:0c:53:
         f4:51:63:fd:6e:62:4d:74:05:02:23:2e:21:54:3c:b6:f4:a3:
         87:6c:69:85:00:32:53:6f:ad:8c:23:27:d6:12:f8:34:f4:68:
         b9:73:85:b1:bd:c1:4c:7e:39:43:6a:81:6c:9f:85:76:96:84:
         66:cc:92:c4:10:33:a0:be:65:0d:2e:03:21:be:cd:3d:d8:90:
         96:44:fc:db
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITJMj3pdv5tqBkrQi6ALIDWEuEnjANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzIyNzhhYWI4NzhmMjY2MmNlMTRlOTA1ZTE4ZWJjYjc1MjJm
OTJiMzY4NGJjNDg2NWI0ZDAeFw0yNDExMjUwMDAwMDBaFw0yNDEyMzAyMzU5NTla
MHoxSTBHBgNVBAUTQDEyOTlkYTJjM2E1N2ZmNTUxM2EyMWMxYmI1MGE1NDFhMTA0
Yzg4ZDk5YWMwYTY2MzZkMDQ2MWUwNWRmMTAxYzAxLTArBgNVBAMTJGMwY2UyM2Vh
LTQzZmMtNGJlNC1iZWVlLWMwMTQ3ODEyMmEwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJLqCXRGBm6am2Y7yZyKx5fThoCtVZ12zX5I8DwZLCNVFgTN
mpzHHm4+APVuDgwC9WkRihq+feTL6vxTzuWjyhFB7/UTPAJuXeLRzTq4yEu4p1KW
DDO+arNRsGPm07oinsqeUbum2Cqx4+kQ6eSEeNQ1vluAVpQmcpuYDBxKd3P82FBm
O11hmsDXkQAstthNX7r4KyvuUIITgVxnHAg8s/HqAke5X6AhzrzsGbW28MKD7aq4
x9DBLFhDf8a81oisVJSyzDLT7dSBdNA4z4Ag/LSk43uVfspRuupZ6aqC4PjORwh4
8PDozE6jRJbdhfpKaYQ96MzNHp/3iyEyTO8dUnsCAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBR2lOJog/+jO5ZLzxrwkLFjuDSDwzAfBgNVHSMEGDAWgBRVqN1F2UQT+dGS
9Sxjzoz7xhSWuDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzE0MzNlYmZmLWRm
ZDYtNGM1Yy1iN2ZmLTk5Yzg1MTM5ZDRhOC8yNzhhYWI4NzhmMjY2MmNlMTRlOTA1
ZTE4ZWJjYjc1MjJmOTJiMzY4NGJjNDg2NWI0ZC5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8xNmYxZmZlZS03NDYxLTQ2NzQtYmIwNS1mZGRl
ZmE5YTAyYzYvM2ExYWY1ZGItYTBlMC00MGVjLThjNjgtMjRiY2E1YmFhZTYxLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUt
ZmRkZWZhOWEwMmM2L0ptTE9GT2tGNFk2OHQxSXZrck5vUzhTR1cwMC5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMckeDANBgkqhkiG9w0BAQsFAAOCAQEAh4nO8gEWXCCrZcjXfZFIxZZGCoAB
6YIzahEqLgOYA6X7q6eKVzmeXEiHNYwqtMXC1r+pubVYAPHLa3fC5o4FHs0NKsGc
ZYx3JfhI/PEGFL4OEjzsRujdgh3GzNiCzvSgpnt9RttNhlBd+nQm4AycY8u+xxvz
CaN9egjVYU3lT9RZ9FDppgQSm8Gum+m02x7c3TmfXddG1dWcp7Qk/IOnSaZ117Ax
a6dU7S1VKmZ2S9np6wxT9FFj/W5iTXQFAiMuIVQ8tvSjh2xphQAyU2+tjCMn1hL4
NPRouXOFsb3BTH45Q2qBbJ+FdpaEZsySxBAzoL5lDS4DIb7NPdiQlkT82w==
-----END CERTIFICATE-----