Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31d00e27-d474-4cec-af4e-868af5831aad/fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0.cer
File:                     fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0.cer (raw, json)
Hash identifier:          cxpIsDMvzXYOsUFIKjEXmoveTHVUIHC65k0QV+QHQ6A=
Subject key identifier:   A4:39:C9:14:15:E8:CD:46:8D:B2:50:8B:01:76:AE:2D:53:31:2E:F2
Authority key identifier: 19:8C:39:52:F2:58:E8:07:C0:2F:1A:49:15:4E:57:2E:7F:3E:F3:37
Certificate issuer:       /CN=31d00e27-d474-4cec-af4e-868af5831aad
Certificate serial:       010D0C9F4328583F40E48A440275B7D9DE2B4480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31d00e27-d474-4cec-af4e-868af5831aad.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0/A439C91415E8CD468DB2508B0176AE2D53312EF2.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 15 Sep 2022 18:56:40 +0000
Certificate not after:    Wed 18 Dec 2024 19:56:40 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:40:e4:8a:44:02:75:b7:d9:de:2b:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d00e27-d474-4cec-af4e-868af5831aad
        Validity
            Not Before: Sep 15 18:56:40 2022 GMT
            Not After : Dec 18 19:56:40 2024 GMT
        Subject: CN=fcb20f596699dbe2f9b68575a2e2f0f58d3cc3a23f9b7507c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:fa:d6:e8:ce:67:a8:c0:01:0a:44:da:2a:
                    fa:b0:be:e6:79:9c:61:9e:e6:5d:cd:75:26:90:c5:
                    35:ed:bf:07:82:73:06:ff:fb:70:19:ee:75:c6:1c:
                    09:a0:5d:2f:93:fc:cc:85:bb:35:c2:67:51:a4:fe:
                    d5:70:6c:50:94:62:3c:be:5d:b0:a3:79:e3:5d:01:
                    96:10:b1:fa:83:00:45:6c:6a:af:3d:8f:86:0b:d5:
                    26:3b:b6:2c:1b:61:d9:c4:19:57:07:7d:34:da:27:
                    01:af:0f:af:45:0b:8b:7e:0e:53:c3:17:69:dd:d2:
                    f3:e9:7b:fa:1b:4c:fd:21:69:20:89:09:c4:7b:85:
                    89:a5:5c:d8:92:65:ad:52:ff:49:7f:b5:4d:6a:87:
                    5d:7d:21:97:a4:2a:01:85:82:e9:0d:a9:a0:4b:0d:
                    81:98:77:df:62:d6:ac:58:14:4a:f2:b1:c8:c9:18:
                    ab:fb:42:a0:c6:c6:d9:92:dd:c3:b3:5c:bf:0e:36:
                    e3:2d:f4:00:08:82:e7:0c:cc:2f:8f:4b:b2:d8:68:
                    63:83:11:39:bc:f3:1e:ca:ef:9a:58:1c:f0:39:cc:
                    f8:d5:64:7c:6d:7b:0e:23:35:16:18:ad:ca:fe:85:
                    fe:49:ae:27:f7:04:e5:23:90:91:f7:ac:cb:b3:81:
                    9e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:39:C9:14:15:E8:CD:46:8D:B2:50:8B:01:76:AE:2D:53:31:2E:F2
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183428263824785/0/A439C91415E8CD468DB2508B0176AE2D53312EF2.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31d00e27-d474-4cec-af4e-868af5831aad/31d00e27-d474-4cec-af4e-868af5831aad.crl

            X509v3 Authority Key Identifier:
                keyid:19:8C:39:52:F2:58:E8:07:C0:2F:1A:49:15:4E:57:2E:7F:3E:F3:37

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/31d00e27-d474-4cec-af4e-868af5831aad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:a0:7c:c8:25:ed:c1:4c:24:25:1b:72:9a:ae:a7:ae:3d:59:
         da:7b:a6:f3:e3:84:44:85:06:c6:61:3c:25:03:d2:dd:9c:5d:
         35:4a:95:2e:4e:88:89:b5:81:7b:c4:e0:45:53:f2:93:da:9b:
         87:c7:9f:a0:3d:50:1b:38:14:46:a2:80:4a:06:5b:92:39:7e:
         9a:51:e5:14:85:ca:72:51:b2:4d:1b:38:a1:e7:44:bf:5c:6e:
         cf:13:f8:d2:c1:08:a6:be:87:14:d9:68:44:51:33:13:10:33:
         65:6c:24:fa:f3:ef:36:83:21:58:08:30:ec:53:0c:d1:eb:88:
         86:45:c1:81:9d:5d:d2:1d:7b:8c:ba:83:6d:d6:9b:4b:e2:a7:
         42:41:79:aa:07:c7:c8:9d:35:7f:1d:3b:a2:ef:05:f7:f1:15:
         5b:f3:27:3d:79:70:ed:13:a2:5d:0d:9a:ee:36:a4:48:0a:e1:
         7b:04:06:f7:b6:2b:5b:d0:85:72:a0:93:47:49:5c:54:03:35:
         b9:da:45:0e:7a:30:f8:85:dd:95:f5:48:a4:23:24:6a:e9:40:
         35:2e:9d:62:f3:d6:72:af:70:99:7d:ec:39:a5:78:ad:a9:16:
         c0:46:a2:b1:96:c4:d9:17:56:e5:c5:95:b1:f3:aa:3d:db:64:
         f8:d6:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:18 2023 by rpki-client on console-fra.rpki-client.org