This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8f0617b1-ea25-4576-bff9-59af5c94b8a3.roa
File:                     8f0617b1-ea25-4576-bff9-59af5c94b8a3.roa (raw, json)
Hash identifier:          B62/s9Jyz4YsaseHFU6kgaBJAlUfbWi/TWTt1LsMX/k=
Subject key identifier:   5C:0D:4A:2B:E2:33:3A:B0:91:C3:F1:9E:40:C0:EC:D4:1B:A3:E4:77
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       60DA80B4422C05BED8CE68F8B8BBC3BA1D8384FA
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8f0617b1-ea25-4576-bff9-59af5c94b8a3.roa
Signing time:             Sat 05 Aug 2023 00:00:00 +0000
ROA not before:           Sat 05 Aug 2023 00:00:00 +0000
ROA not after:            Sat 09 Sep 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:da:80:b4:42:2c:05:be:d8:ce:68:f8:b8:bb:c3:ba:1d:83:84:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Aug  5 00:00:00 2023 GMT
            Not After : Sep  9 23:59:59 2023 GMT
        Subject: serialNumber=e7601d12dbd3fd851664dd9cab58cc12923c1a43edee72ee2e77b02cfe4f9aa7, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9f:42:26:ee:68:25:9e:9e:2a:fd:1d:39:63:
                    3a:18:9b:ce:a4:78:67:73:b6:70:ad:0e:5e:08:9c:
                    08:6b:48:7f:58:44:28:a0:c1:bd:33:fb:87:56:15:
                    41:37:5e:f7:a3:a9:e2:ca:8e:3e:7d:12:02:f2:06:
                    78:e7:2c:3e:98:09:0b:d9:81:7e:36:c7:cd:e5:a9:
                    ea:09:10:88:32:7e:d9:73:9b:bb:bf:98:99:96:4c:
                    3c:81:95:eb:19:01:1e:62:8b:8d:28:77:6a:ba:ed:
                    dc:af:37:26:60:12:36:1f:c9:c3:44:ef:29:d7:1d:
                    cf:d7:fe:b4:b2:89:cb:77:21:a6:18:78:5b:72:9d:
                    af:72:fd:73:30:c6:78:20:ce:46:bf:0c:d3:9a:1b:
                    b0:1d:6c:ce:e6:5a:8c:e4:5c:29:1c:58:75:5a:7a:
                    2a:68:89:44:65:33:ce:68:0a:c9:38:3e:ed:5f:92:
                    dc:36:1a:37:71:41:6e:e0:a9:f3:f3:70:83:69:05:
                    28:6b:50:de:34:72:14:a3:c1:b9:00:47:d9:5a:0e:
                    aa:cf:a2:2d:c0:4b:19:5e:d2:30:89:94:f0:23:11:
                    16:57:6d:8c:e0:0b:06:c1:ad:07:86:83:e8:37:c6:
                    69:43:8d:7f:f3:68:5b:a0:8c:dc:2e:8c:98:41:15:
                    2d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0D:4A:2B:E2:33:3A:B0:91:C3:F1:9E:40:C0:EC:D4:1B:A3:E4:77
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/8f0617b1-ea25-4576-bff9-59af5c94b8a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:41:85:b3:40:ed:f4:07:94:96:14:15:f6:dc:00:7b:03:70:
         e5:57:b9:81:b4:bb:78:74:ee:e7:e7:d3:19:91:bf:49:9d:f9:
         ab:05:41:83:27:51:f2:87:8a:cf:11:17:b8:93:5b:11:4a:8b:
         f5:bd:ad:c9:2f:03:c4:42:87:18:fe:2a:25:80:2b:8b:2d:ae:
         b2:3f:cc:dd:1a:16:02:e4:d3:85:5d:31:e3:8f:e6:e3:1f:fc:
         ba:49:f2:1c:67:70:25:fb:8e:8d:82:24:69:52:a7:d8:88:c3:
         29:ae:65:a1:92:6d:5c:64:d2:bb:0c:3e:75:d3:bd:eb:d2:69:
         0f:cd:9a:14:b4:e0:db:c1:be:61:14:29:6f:26:05:38:f3:7f:
         8c:ab:d5:47:aa:14:85:cb:c3:5a:7d:65:1e:c4:bb:51:eb:1a:
         db:e3:0b:20:21:b1:7e:3b:a7:27:14:e7:ca:8e:10:6b:27:e0:
         71:8f:88:2f:73:3b:ee:7d:ad:68:36:a8:4b:07:e5:50:b3:95:
         f2:d7:4c:2d:60:6c:34:e2:77:cd:25:ba:8d:6a:80:62:80:03:
         67:7e:98:b1:1f:58:c7:23:d3:2f:6b:b8:64:34:f3:b1:7a:3f:
         e5:6b:26:c0:f2:b2:b2:96:75:02:23:1e:a9:75:86:12:74:47:
         01:ff:e0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----