This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eac3f6ca-3cc7-43c0-a79a-85a643f2422e.roa
File:                     eac3f6ca-3cc7-43c0-a79a-85a643f2422e.roa (raw, json)
Hash identifier:          Neojj/frb8hjSMgScInwO2PgvhYF1t/7Yn04lXf9yp8=
Subject key identifier:   C4:C0:B9:6A:15:A1:86:69:A4:38:FD:08:F6:D3:E7:BB:0D:90:2D:04
Certificate issuer:       /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial:       232FF41394B2E4A12A527BF24C6BCCF88EFD7BBE
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eac3f6ca-3cc7-43c0-a79a-85a643f2422e.roa
Signing time:             Thu 05 Jun 2025 12:48:19 +0000
ROA not before:           Thu 05 Jun 2025 12:48:19 +0000
ROA not after:            Thu 10 Jul 2025 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2f:f4:13:94:b2:e4:a1:2a:52:7b:f2:4c:6b:cc:f8:8e:fd:7b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
        Validity
            Not Before: Jun  5 12:48:19 2025 GMT
            Not After : Jul 10 23:59:59 2025 GMT
        Subject: serialNumber=ea4325e0e5f34d10208c7f3dcf15bc1e1acd6d4049badb55f5aefc052be12d0d, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a4:b9:6e:31:28:5f:b0:3a:ef:30:c3:7b:15:
                    9f:7b:31:32:c4:d5:9f:49:7c:6a:83:18:fc:fe:38:
                    85:fc:46:a6:a2:b4:7c:80:2a:49:11:2a:c7:2e:0e:
                    75:a6:ba:d0:de:1e:fb:1d:5d:f9:1f:e4:76:87:b7:
                    cb:ee:92:76:d4:0e:51:35:a8:9b:34:b4:4f:8b:19:
                    6f:f0:ce:1b:18:f6:60:cd:c5:14:d7:a6:21:6d:c0:
                    f0:7e:b0:39:c1:84:da:e5:83:41:48:6b:ad:34:fa:
                    ae:76:bd:cb:9c:21:1c:92:ae:87:9f:f0:11:cd:51:
                    dc:87:e2:cc:6a:c5:bb:d7:21:d2:5e:c0:68:bb:96:
                    a4:a2:3e:b3:b5:a4:66:13:dc:86:d9:7a:cc:92:1b:
                    b4:f1:53:a3:35:39:5a:eb:97:0f:e6:8c:51:cc:70:
                    91:43:1e:af:d7:41:20:ce:af:ed:f3:01:13:b2:80:
                    a7:96:29:01:0b:c7:68:b1:39:68:6e:d2:8b:89:a0:
                    ed:96:17:82:87:da:33:28:f0:22:d7:28:d9:c0:c9:
                    4c:6e:39:f0:f2:d5:09:11:29:86:d5:83:57:f9:bd:
                    f3:bd:b0:5c:ff:9a:00:03:68:18:35:9e:b0:7e:a2:
                    15:ac:52:e1:98:03:e7:13:78:58:6d:67:a2:f7:d2:
                    bf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C0:B9:6A:15:A1:86:69:A4:38:FD:08:F6:D3:E7:BB:0D:90:2D:04
            X509v3 Authority Key Identifier:
                keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/eac3f6ca-3cc7-43c0-a79a-85a643f2422e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ef:98:a8:9f:2d:c1:9b:ee:31:52:4c:5c:86:cd:77:98:fb:
         0b:f1:1f:f2:90:e2:71:ce:d8:30:61:15:b7:88:88:aa:7d:24:
         de:a9:0c:2d:92:27:bf:8b:0a:2b:a4:8d:80:dc:97:7f:95:c2:
         65:ef:f5:c4:6d:c2:82:35:c6:8f:29:db:e4:3a:ee:a5:95:f6:
         ef:c8:13:78:5e:f8:05:a5:0c:94:d7:ff:52:27:d5:50:5a:84:
         05:45:03:3b:0b:30:1c:5a:3e:98:41:98:2b:bd:c2:e4:ad:96:
         17:ff:3c:de:ee:6c:97:1a:be:fa:12:69:de:16:46:51:a0:9b:
         c4:03:4d:87:dc:f3:34:27:4e:89:75:2e:38:32:96:ea:b0:2a:
         95:7a:0f:3a:aa:5f:03:71:46:b4:89:de:0f:98:99:b9:d2:a6:
         2c:1d:59:79:94:3f:57:2a:11:c1:ee:cf:87:b9:3c:12:5d:8b:
         9c:f4:c3:29:5a:21:2d:08:7b:a2:80:dc:ca:08:9a:69:2e:9b:
         41:12:d2:d5:0d:1c:40:93:46:53:55:6b:82:1a:7c:f0:84:61:
         39:17:c6:96:68:99:fe:7d:78:64:66:85:2f:9f:51:be:7e:94:
         e7:29:32:34:3d:33:7e:42:86:a0:90:ef:e8:b2:0b:f0:1b:ba:
         83:b9:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----