This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e304583c-79e0-4498-8360-1ad277bf77c4.roa
File:                     e304583c-79e0-4498-8360-1ad277bf77c4.roa (raw, json)
Hash identifier:          7cM+lXbNHnVKi9/ts234N/xFxrasdMNDv/EPEzGgHek=
Subject key identifier:   98:D9:5C:04:78:63:39:B0:D3:E5:6A:42:A7:D5:A0:8F:F5:8B:95:48
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       60AC4A344A705FDFC3379A1B00CCF02E9635DD8D
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e304583c-79e0-4498-8360-1ad277bf77c4.roa
Signing time:             Tue 14 Nov 2023 00:00:00 +0000
ROA not before:           Tue 14 Nov 2023 00:00:00 +0000
ROA not after:            Tue 19 Dec 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ac:4a:34:4a:70:5f:df:c3:37:9a:1b:00:cc:f0:2e:96:35:dd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Nov 14 00:00:00 2023 GMT
            Not After : Dec 19 23:59:59 2023 GMT
        Subject: serialNumber=1a0dff1d4794afc10c3ae9465f5da830ad16ba1e735b5f47699bd186c2d58f1e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4d:55:b8:5c:cb:8c:81:8f:cb:4d:74:ca:96:
                    70:9b:d5:92:f4:55:93:79:ac:b4:2e:01:36:37:34:
                    90:17:9e:57:5c:a1:12:22:5d:4a:e5:55:d0:6c:ed:
                    22:a2:c6:3e:01:40:01:70:32:31:0b:3c:9d:7a:fa:
                    93:82:c7:06:74:0c:2d:ad:a7:04:1a:ed:d6:ee:c1:
                    23:26:30:3f:09:d3:a8:56:e5:92:d3:90:67:40:f0:
                    62:b6:18:c1:ed:09:56:7a:98:c9:28:1c:c5:26:bd:
                    0e:aa:5c:64:36:e3:87:a3:8e:18:0c:dd:65:1c:fa:
                    1c:2d:ed:43:15:74:0f:84:4f:61:19:60:f4:d5:12:
                    aa:9d:89:86:38:f1:52:98:b7:75:2a:b5:24:84:4b:
                    aa:ff:ca:af:4c:ec:cf:d6:d1:81:b5:15:9f:9c:d8:
                    68:aa:ba:a3:a2:b6:39:b7:63:f6:a0:4e:0d:8a:c2:
                    1a:47:13:95:e8:b4:78:83:c8:bf:e0:e6:a1:2a:79:
                    5a:d5:19:a8:29:aa:ab:65:ce:8e:f9:c9:b8:d3:49:
                    2c:1a:9f:67:4e:07:30:94:fa:30:0f:94:7f:4a:f8:
                    67:40:4a:a0:64:6f:d6:b3:39:15:e6:11:5e:6e:cc:
                    98:90:d8:b1:65:c5:6a:66:5a:62:e7:ec:7d:6d:d8:
                    38:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D9:5C:04:78:63:39:B0:D3:E5:6A:42:A7:D5:A0:8F:F5:8B:95:48
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e304583c-79e0-4498-8360-1ad277bf77c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:bb:1b:f1:85:81:cb:ec:08:45:fe:5b:66:97:dc:f8:93:fb:
         3c:69:6b:15:ed:d5:ef:b1:00:30:a3:eb:10:19:b1:d8:61:0b:
         86:67:d2:96:97:db:f0:8a:19:ec:e1:2d:77:8a:d6:16:12:dd:
         84:b0:ad:15:dd:81:a9:7b:c6:44:69:8d:57:32:bb:92:50:3f:
         13:16:0f:46:94:c8:bd:53:be:0f:6c:89:12:f6:07:3c:c3:c2:
         e8:f3:fa:e4:ff:3e:50:b3:2e:fe:85:b4:c0:45:b2:b2:53:a7:
         88:57:df:49:ab:ca:d3:bf:2a:fc:e8:9a:ce:13:99:93:1a:3d:
         97:bd:64:c5:80:f4:82:02:20:33:1a:88:eb:e5:2d:c5:15:66:
         15:d1:39:05:02:99:32:dd:e5:95:d5:63:c3:ab:60:f8:44:52:
         af:63:c3:25:cc:0b:08:95:d5:18:a2:a6:44:d6:6c:86:53:85:
         ec:a2:ba:47:12:e0:15:ac:81:ce:a6:ad:5f:fa:98:ea:32:1b:
         dd:cf:e5:6a:9d:0a:90:b7:27:b5:bd:e5:03:b6:06:7a:c8:21:
         15:97:57:8d:eb:6e:11:5c:15:08:49:c9:1e:f0:4e:f7:20:0b:
         cd:d4:ba:ce:e9:18:3f:bf:c4:7c:3d:49:cc:e8:ee:41:52:5c:
         35:e5:38:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----