This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5ec8e09e-f81e-46d8-8cad-cdcd45d992f8.roa
File:                     5ec8e09e-f81e-46d8-8cad-cdcd45d992f8.roa (raw, json)
Hash identifier:          ZfpRx7g9EJ98+MwDDk3lYFbHOO8v6HMtqB6N8nkO3pg=
Subject key identifier:   FC:68:39:55:B7:67:DA:92:24:7B:13:64:2E:1C:36:3E:4B:96:55:C1
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5B5DB0D364D4E573AD3E20A02C2E3E20B2FEEA77
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5ec8e09e-f81e-46d8-8cad-cdcd45d992f8.roa
Signing time:             Tue 03 Oct 2023 00:00:00 +0000
ROA not before:           Tue 03 Oct 2023 00:00:00 +0000
ROA not after:            Tue 07 Nov 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5d:b0:d3:64:d4:e5:73:ad:3e:20:a0:2c:2e:3e:20:b2:fe:ea:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Oct  3 00:00:00 2023 GMT
            Not After : Nov  7 23:59:59 2023 GMT
        Subject: serialNumber=85f0b7c8674bd5ba84c090f2223e4ddf410c93b9938aadb35dda9593d60d7aee, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:a1:1a:db:eb:4c:f9:80:0c:4f:02:15:86:
                    ba:73:95:ec:64:89:fb:1f:06:ca:8d:f6:cb:ac:2d:
                    fd:b0:ae:47:26:e7:33:d4:d8:c4:99:2a:4c:c5:7e:
                    4b:fc:a0:7f:0c:03:cf:df:f3:3a:f9:2d:71:2c:82:
                    52:b9:8d:e6:ca:f9:ff:a0:7c:a9:e7:f9:f2:25:82:
                    d8:3f:3f:c9:1f:77:e7:61:34:5e:24:78:0a:d3:4b:
                    c0:d7:d4:83:6c:6c:6b:cb:f6:8d:9e:fb:44:3d:84:
                    24:5c:37:71:55:f8:b5:f3:87:e1:68:a3:6f:25:ee:
                    36:72:5e:be:2d:53:62:b9:f8:ed:e8:88:45:90:8c:
                    f3:cd:24:cc:bb:53:48:4a:21:19:40:6b:22:2a:16:
                    4d:27:1a:36:41:65:cc:5a:44:ea:e0:13:77:40:42:
                    f4:13:26:56:f6:b4:96:df:bc:ac:fe:f3:f1:96:32:
                    f8:89:fd:98:ef:e1:97:49:fb:a3:2c:df:25:46:f8:
                    cb:e9:aa:8c:b8:36:d6:26:91:0c:21:11:57:93:59:
                    a9:f5:c7:f2:e5:b5:66:14:da:ed:99:86:97:ef:af:
                    75:5a:e0:f0:4b:e7:56:8c:d4:91:1b:0a:e8:c6:eb:
                    88:5b:1d:30:04:9f:90:b0:d9:44:6e:a1:40:e8:7a:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:68:39:55:B7:67:DA:92:24:7B:13:64:2E:1C:36:3E:4B:96:55:C1
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5ec8e09e-f81e-46d8-8cad-cdcd45d992f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:4e:e4:66:97:00:6c:42:4a:5b:90:77:69:3a:ab:cd:e7:2c:
         82:1b:a2:01:f4:99:1e:90:ee:d6:54:2d:d9:f7:0b:62:9c:d2:
         1d:00:31:2e:ce:fe:8a:71:be:bb:40:13:46:3c:17:d1:f1:74:
         8f:bf:4e:83:fd:51:fa:bd:c4:cf:ce:5f:87:96:2f:b6:c1:e4:
         5e:fc:91:f1:1b:1a:76:08:9c:f6:0a:a9:01:ac:15:d8:8a:18:
         8d:8d:57:b1:64:26:43:ad:a1:55:f9:77:71:e9:4a:77:9d:22:
         10:33:36:15:51:13:23:72:fe:90:26:2c:9c:df:84:51:5e:f9:
         09:33:a0:8c:21:7d:a5:44:a3:da:da:40:1e:b9:52:13:24:92:
         ec:4a:3c:69:22:61:56:6b:90:d1:31:e7:ad:fe:2f:58:85:90:
         a7:79:28:b9:d4:2b:30:36:c8:d2:b6:c5:50:6c:87:1f:2a:3b:
         f7:d5:dc:5d:06:07:8e:d5:b6:94:99:30:ff:0f:26:3b:a5:1d:
         fe:85:c8:97:51:d4:d9:38:b5:c3:9c:db:87:1f:b0:f3:58:4a:
         04:56:bd:3b:97:b7:45:b4:88:56:69:eb:fc:50:fa:7b:b1:bc:
         d1:f6:ae:12:fa:78:c7:94:8a:eb:21:10:39:64:82:cd:5d:23:
         53:37:3f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----