This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/54cb8c30-7e61-4e8e-a38d-a9602494c740.roa
File:                     54cb8c30-7e61-4e8e-a38d-a9602494c740.roa (raw, json)
Hash identifier:          mX6F9LKYmxzhbaars+lpiLQR7OGrefVOcnNoAcQzwNE=
Subject key identifier:   44:87:34:59:C8:78:B7:75:68:A6:82:3E:AE:8B:DD:2D:9A:10:11:BF
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       2C7EF978D7E03EDC3B2C1E9801C8FDA78F4B9593
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/54cb8c30-7e61-4e8e-a38d-a9602494c740.roa
Signing time:             Sun 29 Dec 2024 00:00:00 +0000
ROA not before:           Sun 29 Dec 2024 00:00:00 +0000
ROA not after:            Sun 02 Feb 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:7e:f9:78:d7:e0:3e:dc:3b:2c:1e:98:01:c8:fd:a7:8f:4b:95:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Dec 29 00:00:00 2024 GMT
            Not After : Feb  2 23:59:59 2025 GMT
        Subject: serialNumber=65d7544b390c7be32c52e04dbb7bb9649f44512ea5cf636ace39ca699d6782f5, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:70:0c:da:88:a1:77:0d:43:e6:a3:3b:30:
                    0e:c6:28:7f:99:e0:9d:3c:ce:79:a0:27:3a:d1:a6:
                    8e:e1:da:49:2a:52:f8:0d:c0:4c:0c:a5:4b:b1:32:
                    03:8a:64:d4:e4:e8:07:28:4e:6c:77:31:3c:5f:13:
                    5c:c0:57:61:95:07:79:a1:6a:b2:2b:f7:aa:7c:60:
                    c3:b3:c5:f3:7b:75:ce:84:30:39:1e:97:d8:e7:08:
                    56:23:66:ec:49:1c:75:33:81:39:9e:ae:04:57:87:
                    c1:3e:61:b9:f4:f4:c9:e9:2d:1e:5a:2f:29:1d:42:
                    4c:3f:bc:f8:11:80:72:3d:6e:91:24:34:f7:79:e7:
                    c3:22:1b:41:42:90:9f:13:a8:3c:db:a9:6d:9a:31:
                    18:f5:7e:60:f4:78:e9:12:b3:a5:65:20:07:da:13:
                    42:60:6a:21:b6:ce:1c:4e:07:8c:58:1b:b2:a4:c2:
                    9c:b5:2f:b8:d5:7b:58:a6:05:4d:d5:98:c5:5e:81:
                    73:8f:4d:bc:dd:30:0d:68:f5:bb:18:17:b9:82:f4:
                    5b:7d:16:57:33:56:0c:45:05:4e:92:f4:65:89:d5:
                    28:d2:d9:94:85:60:ff:71:e7:06:d9:07:69:3f:fd:
                    5c:bd:06:bc:cf:3c:d7:1a:38:6d:3b:55:44:6a:b4:
                    ff:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:87:34:59:C8:78:B7:75:68:A6:82:3E:AE:8B:DD:2D:9A:10:11:BF
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/54cb8c30-7e61-4e8e-a38d-a9602494c740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:49:8e:5c:64:e1:ab:e0:7c:2d:75:13:b6:31:b0:d6:d1:4e:
         92:c5:7f:c5:d4:db:e3:55:bf:f0:85:5a:ca:76:62:35:65:32:
         e2:1d:9e:ca:6b:00:1c:1f:44:7e:c4:b7:9c:d7:fe:3e:cf:48:
         6b:9b:1c:15:a1:1d:a7:e0:91:8b:a5:9b:3a:26:41:3d:a7:87:
         39:3f:52:3b:47:91:d8:33:2c:dd:3f:99:5d:b9:be:3d:9b:35:
         b7:9b:c4:e5:93:01:9d:f6:47:13:0e:96:d9:23:5a:83:27:40:
         57:7d:59:c4:1f:f5:8a:bf:22:ed:56:c0:53:79:4b:61:c7:28:
         17:c7:15:0b:47:60:62:92:7b:53:b0:e9:dc:46:f1:d1:fb:6c:
         bd:70:91:69:21:d3:0e:8e:03:53:c8:ec:56:78:ee:6c:a5:e6:
         e1:48:00:51:b7:25:8f:fd:99:bd:f8:c6:15:86:d5:5d:78:5c:
         17:4a:cb:70:ba:7f:a6:44:05:13:6e:c5:46:75:e0:cd:7a:78:
         1d:bf:bc:e0:32:9b:7b:18:94:f0:8f:28:85:92:ac:f2:d8:37:
         e2:9b:fd:9a:6e:37:5a:4c:59:50:15:5c:d1:82:61:f4:4a:02:
         65:2f:0d:80:14:73:ae:e1:86:4b:1e:39:b3:d7:91:15:dc:92:
         42:1e:ac:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----