This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2ab8475-2c7c-452b-beb8-f924ef384424.roa
File:                     a2ab8475-2c7c-452b-beb8-f924ef384424.roa (raw, json)
Hash identifier:          u1+GQgmK63DsQVAYRCrZRKlP138v56fNd+pCGNor0bg=
Subject key identifier:   3E:F3:28:D8:33:04:09:C7:87:D9:F7:F0:17:EA:4B:37:AE:F4:A6:1F
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       5DD2A477830548842470DFA8A2FB2E16D56131A1
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2ab8475-2c7c-452b-beb8-f924ef384424.roa
Signing time:             Mon 15 Jul 2024 00:00:00 +0000
ROA not before:           Mon 15 Jul 2024 00:00:00 +0000
ROA not after:            Mon 19 Aug 2024 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d2:a4:77:83:05:48:84:24:70:df:a8:a2:fb:2e:16:d5:61:31:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jul 15 00:00:00 2024 GMT
            Not After : Aug 19 23:59:59 2024 GMT
        Subject: serialNumber=4cfe900776c5b1085d6f60cbc6b83342af53032019e4d17363d4fc1c7bc52b24, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:8e:2f:96:19:ed:5c:25:5a:82:1c:af:f2:
                    cc:dc:54:14:ff:90:b4:ef:b6:2a:ab:db:2e:94:c2:
                    7c:d9:94:9d:17:61:39:02:2b:d1:45:9a:05:ef:8e:
                    e9:36:7d:08:0c:c2:45:96:17:2f:cc:c4:00:40:bb:
                    5c:c6:41:90:ad:ad:a8:7a:99:bf:94:6e:6e:e8:96:
                    74:7d:8a:e7:36:cb:9b:6b:1b:59:81:c5:73:ec:5c:
                    41:a4:cc:88:64:cc:d8:be:48:1d:f5:95:97:cd:ae:
                    0c:37:f1:eb:d5:43:bd:34:92:b0:45:f3:ea:61:93:
                    a4:8d:97:d3:f6:6a:87:f9:c9:3e:12:1b:d5:c3:65:
                    70:75:67:da:04:b4:2a:cb:68:d4:bc:74:e0:d5:ff:
                    33:f7:53:3d:f6:e8:f2:4e:2f:09:9e:26:6b:e9:e2:
                    80:fa:37:a0:ae:4a:09:42:6f:58:a7:1e:35:63:25:
                    a3:ad:64:1c:1b:c6:fd:e8:12:ba:04:7e:80:d5:6f:
                    bd:d2:23:af:59:f4:a3:58:ee:b6:07:67:08:31:81:
                    93:ea:f2:88:41:6d:7a:6e:14:8b:71:a6:c3:1b:fa:
                    3d:4b:7a:da:f1:dc:7e:88:cd:3e:f8:f8:a1:09:1e:
                    4d:3b:57:40:c2:1a:2e:7b:6c:27:16:f9:28:e7:30:
                    9a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F3:28:D8:33:04:09:C7:87:D9:F7:F0:17:EA:4B:37:AE:F4:A6:1F
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/a2ab8475-2c7c-452b-beb8-f924ef384424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:df:dd:a2:e2:cb:87:66:fa:a7:2f:a9:ac:87:1b:b2:51:d4:
         6b:fc:87:4f:27:32:bf:b6:46:f3:7c:83:1b:f3:f3:d4:ec:a0:
         6e:46:97:e8:37:32:23:e5:30:2c:4e:1a:76:c2:32:26:9d:9b:
         59:32:42:e6:76:6a:3f:45:4b:86:6c:62:89:68:b7:98:b5:9e:
         5f:c8:6f:02:83:e9:0b:b3:60:de:4e:cf:ab:55:ef:17:c0:10:
         ce:68:2a:b1:7e:7b:3b:d5:10:50:d0:bc:66:b2:e7:56:2d:4c:
         ee:64:b5:1a:a5:99:76:04:77:ce:c3:d4:1d:ec:eb:d6:71:57:
         f2:fe:40:42:b1:d3:18:f8:b6:ee:99:ff:b2:1b:98:9a:7d:ac:
         93:6f:19:14:2a:42:70:20:be:3f:07:73:ef:5a:e7:11:d5:05:
         f2:b1:e1:d5:dd:cd:6e:88:cb:92:d2:a3:96:04:f8:05:c1:29:
         0c:67:5c:23:41:e1:3e:b4:40:b1:2d:8e:e6:dd:fd:c5:fb:5c:
         77:74:de:cb:7d:3d:8e:54:01:eb:9e:e8:32:dc:30:6e:55:42:
         40:51:22:e1:a3:0f:06:69:9f:7b:0f:66:86:30:19:bc:7c:b9:
         52:c6:ca:4a:0a:37:e4:ea:7a:b5:02:69:42:90:e5:d5:87:a6:
         7c:e9:28:6b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXdKkd4MFSIQkcN+oovsuFtVhMaEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjc4YWFiODc4ZjI2NjJjZTE0ZTkwNWUxOGViY2I3NTIy
ZjkyYjM2ODRiYzQ4NjViNGQwHhcNMjQwNzE1MDAwMDAwWhcNMjQwODE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0Y2ZlOTAwNzc2YzViMTA4NWQ2ZjYwY2JjNmI4MzM0MmFm
NTMwMzIwMTllNGQxNzM2M2Q0ZmMxYzdiYzUyYjI0MS0wKwYDVQQDEyRjMGNlMjNl
YS00M2ZjLTRiZTQtYmVlZS1jMDE0NzgxMjJhMGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2HY4vlhntXCVaghyv8szcVBT/kLTvtiqr2y6UwnzZlJ0X
YTkCK9FFmgXvjuk2fQgMwkWWFy/MxABAu1zGQZCtrah6mb+Ubm7olnR9iuc2y5tr
G1mBxXPsXEGkzIhkzNi+SB31lZfNrgw38evVQ700krBF8+phk6SNl9P2aof5yT4S
G9XDZXB1Z9oEtCrLaNS8dODV/zP3Uz326PJOLwmeJmvp4oD6N6CuSglCb1inHjVj
JaOtZBwbxv3oEroEfoDVb73SI69Z9KNY7rYHZwgxgZPq8ohBbXpuFItxpsMb+j1L
etrx3H6IzT74+KEJHk07V0DCGi57bCcW+SjnMJq5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUPvMo2DMECceH2ffwF+pLN670ph8wHwYDVR0jBBgwFoAUVajdRdlEE/nR
kvUsY86M+8YUlrgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNDMzZWJmZi1k
ZmQ2LTRjNWMtYjdmZi05OWM4NTEzOWQ0YTgvMjc4YWFiODc4ZjI2NjJjZTE0ZTkw
NWUxOGViY2I3NTIyZjkyYjM2ODRiYzQ4NjViNGQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRk
ZWZhOWEwMmM2L2EyYWI4NDc1LTJjN2MtNDUyYi1iZWI4LWY5MjRlZjM4NDQyNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzE2ZjFmZmVlLTc0NjEtNDY3NC1iYjA1
LWZkZGVmYTlhMDJjNi9KbUxPRk9rRjRZNjh0MUl2a3JOb1M4U0dXMDAuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADHJHgwDQYJKoZIhvcNAQELBQADggEBADXf3aLiy4dm+qcvqayHG7JR1Gv8
h08nMr+2RvN8gxvz89TsoG5Gl+g3MiPlMCxOGnbCMiadm1kyQuZ2aj9FS4ZsYolo
t5i1nl/IbwKD6QuzYN5Oz6tV7xfAEM5oKrF+ezvVEFDQvGay51YtTO5ktRqlmXYE
d87D1B3s69ZxV/L+QEKx0xj4tu6Z/7IbmJp9rJNvGRQqQnAgvj8Hc+9a5xHVBfKx
4dXdzW6Iy5LSo5YE+AXBKQxnXCNB4T60QLEtjubd/cX7XHd03st9PY5UAeue6DLc
MG5VQkBRIuGjDwZpn3sPZoYwGbx8uVLGykoKN+TqerUCaUKQ5dWHpnzpKGs=
-----END CERTIFICATE-----