This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8e592b8-cc56-429f-8355-7aa7cf9202e5.roa
File:                     e8e592b8-cc56-429f-8355-7aa7cf9202e5.roa (raw, json)
Hash identifier:          tbEpN3Pg5o8JEqm1eCQErDcbGTJlwmG1ocj5rBcu+yk=
Subject key identifier:   A0:27:01:B1:66:06:D2:59:FA:CD:CA:91:23:E6:2A:92:C9:DA:37:20
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       63B16B1DF7358809720DFBD0633DA59B01848500
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8e592b8-cc56-429f-8355-7aa7cf9202e5.roa
Signing time:             Thu 21 Sep 2023 00:00:00 +0000
ROA not before:           Thu 21 Sep 2023 00:00:00 +0000
ROA not after:            Thu 26 Oct 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b1:6b:1d:f7:35:88:09:72:0d:fb:d0:63:3d:a5:9b:01:84:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Sep 21 00:00:00 2023 GMT
            Not After : Oct 26 23:59:59 2023 GMT
        Subject: serialNumber=af9748e838930d7d78e0c803d68009f148177711f397134b432eaca987d99008, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f7:be:a7:74:64:ba:53:53:f3:ac:c4:ee:0c:
                    ca:71:9d:cf:6c:8a:1d:ec:19:27:60:33:98:03:8b:
                    e4:f4:d3:17:aa:1b:70:4d:09:bd:0c:b6:83:55:ad:
                    dc:0f:01:92:31:12:61:ea:89:09:ac:ad:3c:b1:23:
                    ab:b3:94:e0:d9:29:2e:d8:3b:d6:92:52:91:64:c5:
                    40:10:6b:14:4d:98:70:cc:0c:1a:44:01:1b:bb:2a:
                    52:e6:9e:0d:ae:e4:9c:e7:aa:41:a0:5d:7a:f6:c3:
                    35:0f:7d:88:e2:d0:9b:7d:e0:23:f2:c6:0f:f8:5e:
                    d4:ba:7e:ff:2e:78:79:10:83:35:26:31:bd:14:4c:
                    27:22:13:95:b4:76:3e:98:32:b1:f6:97:54:43:88:
                    b3:6f:49:53:96:cb:5a:2d:89:74:44:51:52:04:34:
                    6b:6c:c9:07:d0:1b:9e:6d:1c:e7:e1:7f:cc:34:06:
                    91:a6:5b:c4:4e:2f:92:c4:7e:d7:77:5e:00:fe:38:
                    22:8d:46:ef:9d:b3:b4:b2:8c:19:c7:d3:67:56:9d:
                    5d:62:26:08:eb:b9:82:8a:20:4b:81:78:29:7b:04:
                    f5:b8:06:86:82:82:f7:55:65:de:f6:9e:34:a6:23:
                    14:af:a9:f3:21:ab:13:73:b5:7a:75:f2:59:e5:67:
                    39:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:27:01:B1:66:06:D2:59:FA:CD:CA:91:23:E6:2A:92:C9:DA:37:20
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/e8e592b8-cc56-429f-8355-7aa7cf9202e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:af:dd:cd:38:6f:05:0e:ba:a1:4c:e6:28:27:36:54:e4:47:
         30:25:b9:c6:24:f6:50:f2:5e:e8:63:1a:62:ea:6f:36:92:12:
         ee:8d:4c:58:c8:20:f4:3b:71:47:0d:02:62:c2:2e:04:41:19:
         5e:59:6e:9f:a6:b5:6b:1e:4e:f9:d3:d4:9c:00:13:90:18:f6:
         a3:ae:eb:87:c6:b0:30:0f:db:b2:9d:99:ca:4b:a2:e2:29:8c:
         05:d8:92:a7:10:6c:30:e8:47:46:d0:2f:a8:e8:61:ad:11:0b:
         b1:5b:2c:59:c6:4c:c8:f9:67:64:e3:af:fc:d1:7b:81:ca:ac:
         1b:c1:e6:61:67:b7:cf:9e:81:84:d8:24:27:86:19:bb:90:0b:
         33:ef:3a:94:b0:48:e2:32:a2:bc:6e:db:a8:15:50:e9:ac:26:
         63:43:44:f6:9d:30:2b:57:cf:a6:78:87:fe:7b:84:a6:0b:44:
         8e:fd:64:df:d5:86:29:71:ec:54:9c:60:ae:00:fa:33:b6:b5:
         3b:d6:3e:15:6c:c5:f4:e9:07:5a:39:a7:27:ac:6d:1c:a7:44:
         1f:02:13:33:3d:01:5b:aa:5c:8e:7a:98:b8:2c:3f:6b:ec:b6:
         52:bb:de:1c:57:9b:97:6e:b9:d6:ea:ee:60:87:b4:6f:c4:d8:
         a8:24:27:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----