This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/882d5c3b-8a34-4fee-b5de-a9e15068a80a.roa
File:                     882d5c3b-8a34-4fee-b5de-a9e15068a80a.roa (raw, json)
Hash identifier:          47+X67linWJiNIMyGr9qvQfKqVJAxsevIK+FYYeDX4M=
Subject key identifier:   98:AC:CF:96:0E:1A:B9:FD:F9:88:80:2B:2E:0B:5D:40:8B:84:DE:E1
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       6DFDDE1D0773E16F8104B11E922D74AEF2CF16B4
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/882d5c3b-8a34-4fee-b5de-a9e15068a80a.roa
Signing time:             Sat 16 Mar 2024 00:00:00 +0000
ROA not before:           Sat 16 Mar 2024 00:00:00 +0000
ROA not after:            Sat 20 Apr 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fd:de:1d:07:73:e1:6f:81:04:b1:1e:92:2d:74:ae:f2:cf:16:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Mar 16 00:00:00 2024 GMT
            Not After : Apr 20 23:59:59 2024 GMT
        Subject: serialNumber=e5758550c033b3d95614e219e314c28a5fb544ec4f0eb7124c8c2540d1e2f483, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:16:af:03:68:92:6b:47:48:68:e6:9c:e8:5a:
                    0c:f9:27:26:2a:83:85:d8:97:9e:d0:51:57:43:fb:
                    5b:56:4c:6e:41:54:29:b2:3f:98:19:a6:49:cb:f5:
                    2a:ec:aa:8e:4f:b1:83:14:a1:18:fa:7c:f1:b4:d4:
                    20:8e:7f:aa:17:ef:db:65:d0:b2:dc:3f:54:ce:bb:
                    5f:d3:2f:5d:c0:d5:88:b4:3b:29:1a:15:11:83:96:
                    54:2a:01:b5:da:d2:2e:a2:3f:88:71:68:8d:a6:28:
                    5f:ba:e5:93:0a:a2:de:d8:54:fc:93:a3:cc:35:92:
                    69:54:6b:38:f1:bf:fc:94:74:6e:bd:be:b4:0b:c7:
                    33:3f:0e:3f:82:6b:d9:7e:2c:49:ce:ab:d4:9d:31:
                    2b:1c:e9:9d:dc:31:65:29:32:46:ec:59:1c:80:c7:
                    cb:55:9b:82:0d:7e:73:50:73:fe:d2:3a:93:ee:23:
                    34:74:1a:3f:8d:ae:26:d0:7b:8c:91:1f:18:0b:ea:
                    bb:13:87:73:de:74:2f:31:90:da:24:de:97:36:40:
                    6e:13:8a:70:77:c1:33:38:c6:3a:be:7f:1f:2d:45:
                    56:7c:a2:66:51:0f:03:24:64:93:85:02:f5:bb:f4:
                    5c:ed:2e:a0:a0:cb:6a:a1:99:78:a8:49:d4:b2:e4:
                    84:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AC:CF:96:0E:1A:B9:FD:F9:88:80:2B:2E:0B:5D:40:8B:84:DE:E1
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/882d5c3b-8a34-4fee-b5de-a9e15068a80a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:f3:86:d4:14:96:40:3d:c2:78:76:f9:b2:23:5d:e1:8f:f5:
         11:95:51:1a:d3:9a:5a:6c:c2:4e:cd:15:99:b6:47:00:ec:98:
         04:09:2c:50:21:ec:54:c8:62:b0:5c:01:51:0b:95:dc:45:10:
         79:20:cc:ca:6e:fb:71:36:69:46:a2:30:f3:c6:06:cd:9a:af:
         b3:4b:12:fa:fb:54:87:de:44:06:bb:38:5a:14:a2:37:ac:bb:
         20:17:b5:e6:94:1a:71:83:d5:e4:f8:e6:a4:39:df:1d:2a:6e:
         85:b0:7e:ad:8d:1e:be:18:ef:c3:4b:37:af:2a:1f:ac:85:e2:
         5e:68:77:0f:56:de:d8:37:2e:46:7a:7c:81:44:72:4c:d4:66:
         67:f3:05:5e:b3:45:e5:76:c0:cb:2f:4a:67:4a:26:0c:16:90:
         e5:4f:7f:b1:71:d2:64:4e:48:1d:9f:48:5f:10:38:3d:12:c1:
         2f:bd:32:5c:87:f9:db:4b:cb:ab:22:fb:31:b6:fb:25:ba:52:
         9f:21:6a:d9:e6:ed:ff:3c:38:77:17:86:e9:f2:de:fc:18:ae:
         99:3c:cb:e8:6d:a5:1e:1b:18:ed:fd:91:db:42:91:b3:1c:1e:
         60:df:dc:e8:f8:b3:ed:c3:96:02:46:a6:41:bf:04:c9:73:28:
         d7:c1:32:9f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbf3eHQdz4W+BBLEeki10rvLPFrQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwMzE2MDAwMDAwWhcNMjQwNDIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNTc1ODU1MGMwMzNiM2Q5NTYxNGUyMTllMzE0YzI4YTVm
YjU0NGVjNGYwZWI3MTI0YzhjMjU0MGQxZTJmNDgzMS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6Fq8DaJJrR0ho5pzoWgz5JyYqg4XYl57QUVdD+1tWTG5B
VCmyP5gZpknL9Srsqo5PsYMUoRj6fPG01CCOf6oX79tl0LLcP1TOu1/TL13A1Yi0
OykaFRGDllQqAbXa0i6iP4hxaI2mKF+65ZMKot7YVPyTo8w1kmlUazjxv/yUdG69
vrQLxzM/Dj+Ca9l+LEnOq9SdMSsc6Z3cMWUpMkbsWRyAx8tVm4INfnNQc/7SOpPu
IzR0Gj+NribQe4yRHxgL6rsTh3PedC8xkNok3pc2QG4TinB3wTM4xjq+fx8tRVZ8
omZRDwMkZJOFAvW79FztLqCgy2qhmXioSdSy5ISdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUmKzPlg4auf35iIArLgtdQIuE3uEwHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2Lzg4MmQ1YzNiLThhMzQtNGZlZS1iNWRlLWE5ZTE1MDY4YTgwYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBAI/zhtQUlkA9wnh2+bIjXeGP9RGV
URrTmlpswk7NFZm2RwDsmAQJLFAh7FTIYrBcAVELldxFEHkgzMpu+3E2aUaiMPPG
Bs2ar7NLEvr7VIfeRAa7OFoUojesuyAXteaUGnGD1eT45qQ53x0qboWwfq2NHr4Y
78NLN68qH6yF4l5odw9W3tg3LkZ6fIFEckzUZmfzBV6zReV2wMsvSmdKJgwWkOVP
f7Fx0mROSB2fSF8QOD0SwS+9MlyH+dtLy6si+zG2+yW6Up8hatnm7f88OHcXhuny
3vwYrpk8y+htpR4bGO39kdtCkbMcHmDf3Oj4s+3DlgJGpkG/BMlzKNfBMp8=
-----END CERTIFICATE-----