Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95132f33-ebca-4c88-9c3c-8225c6a009ad/fa1413047bfa079ddf37e9ceea88cc6ffb9c16db84d116b6f8.cer
File:                     fa1413047bfa079ddf37e9ceea88cc6ffb9c16db84d116b6f8.cer (raw, json)
Hash identifier:          OQePfMD7zEpZdEB24LGAUiorEIUFA+bYxm+pk3h55gE=
Subject key identifier:   E8:BB:7C:DA:C5:20:54:76:15:C7:D8:D3:4A:56:4C:A7:3E:E6:38:58
Authority key identifier: 6A:AE:2A:F9:F3:4B:EE:01:8C:01:CF:8D:46:F7:6B:37:69:58:61:08
Certificate issuer:       /CN=95132f33-ebca-4c88-9c3c-8225c6a009ad
Certificate serial:       010D0C9F4328583D33C3C0FC5E2C225DA7A5B080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95132f33-ebca-4c88-9c3c-8225c6a009ad.cer
Manifest:                 rsync://rpki.august.tw/repo/localname/2/E8BB7CDAC520547615C7D8D34A564CA73EE63858.mft
caRepository:             rsync://rpki.august.tw/repo/localname/2
Notify URL:               https://rpki.august.tw/rrdp/notification.xml
Certificate not before:   Fri 11 Mar 2022 16:31:13 +0000
Certificate not after:    Thu 11 Mar 2032 16:31:13 +0000
Subordinate resources:    IP: 2606:c140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:33:c3:c0:fc:5e:2c:22:5d:a7:a5:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95132f33-ebca-4c88-9c3c-8225c6a009ad
        Validity
            Not Before: Mar 11 16:31:13 2022 GMT
            Not After : Mar 11 16:31:13 2032 GMT
        Subject: CN=fa1413047bfa079ddf37e9ceea88cc6ffb9c16db84d116b6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ac:b9:f1:b2:44:25:5a:00:44:95:5e:10:1b:
                    0e:19:73:42:4b:e0:38:66:e9:36:8f:e9:e0:6d:fc:
                    a7:3b:96:53:c1:ed:04:cc:36:8c:21:fb:d7:aa:a7:
                    c5:1e:24:31:b2:e0:a7:d7:d9:40:37:d6:c8:ce:68:
                    c0:a3:54:a6:7f:c7:b2:a2:11:b3:bf:26:ba:cf:d5:
                    20:52:93:73:63:11:07:70:41:41:43:a9:b9:8e:43:
                    7d:81:dc:ee:f2:8f:ab:c4:ab:a6:72:d4:67:6e:4e:
                    0a:d1:a3:2e:c8:41:6a:03:47:5a:c9:51:2d:76:49:
                    1e:ed:b1:77:0b:1d:4d:12:6b:2f:ea:f8:01:02:c4:
                    b4:20:3f:c4:81:a0:e7:80:6a:80:7d:4f:82:c4:8c:
                    89:24:fa:d2:0a:2d:dc:ca:b1:6d:07:b0:64:45:be:
                    83:ad:8b:f3:f8:94:12:f5:fe:c5:14:ba:21:14:8b:
                    55:a1:47:4a:1c:6f:85:6c:4a:a1:b9:d8:d1:d4:5b:
                    8c:df:ba:b0:57:b8:cd:ee:c6:d3:16:a7:96:1e:3d:
                    20:5e:dd:48:35:b4:91:0c:58:d9:50:40:2e:53:22:
                    79:c4:32:80:1f:a6:25:cf:ca:ce:5c:08:4b:44:28:
                    e3:e4:fe:42:1f:3e:8d:5d:20:aa:59:af:24:24:f8:
                    b5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BB:7C:DA:C5:20:54:76:15:C7:D8:D3:4A:56:4C:A7:3E:E6:38:58
            Subject Information Access:
                CA Repository - URI:rsync://rpki.august.tw/repo/localname/2
                RPKI Manifest - URI:rsync://rpki.august.tw/repo/localname/2/E8BB7CDAC520547615C7D8D34A564CA73EE63858.mft
                RPKI Notify - URI:https://rpki.august.tw/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95132f33-ebca-4c88-9c3c-8225c6a009ad/95132f33-ebca-4c88-9c3c-8225c6a009ad.crl

            X509v3 Authority Key Identifier:
                keyid:6A:AE:2A:F9:F3:4B:EE:01:8C:01:CF:8D:46:F7:6B:37:69:58:61:08

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95132f33-ebca-4c88-9c3c-8225c6a009ad.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:c140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:63:33:1b:5b:be:be:61:c2:54:9d:bc:db:43:81:ec:61:ea:
         60:dd:02:f6:de:b4:96:b4:35:c5:d3:f2:e4:f7:0d:d6:df:f6:
         a7:11:a9:67:b0:18:49:aa:fe:00:39:75:03:f8:5f:57:69:83:
         60:30:b7:c1:3e:67:91:e2:d7:11:af:ca:9c:16:41:d4:18:5f:
         0e:0c:7f:ed:94:f0:93:63:83:ec:23:41:c5:09:a4:73:bc:22:
         11:a6:30:76:cc:39:74:fc:5f:ba:a0:32:5a:7b:4d:66:49:3d:
         0b:ce:00:bf:61:f5:3e:62:20:ca:ea:b2:40:9d:78:4d:77:bf:
         33:7c:69:97:1e:8c:96:af:15:34:25:fd:a3:60:7a:85:e8:0b:
         bd:1e:56:20:dd:e1:d5:65:b4:fd:ed:80:5a:9f:de:0e:5f:9a:
         67:dc:7b:83:54:08:7d:03:9d:93:c6:47:b3:62:55:a2:86:13:
         41:34:08:3d:ed:3a:e8:1f:cd:5a:33:10:31:6c:2d:78:08:e8:
         79:ed:ff:84:90:09:0c:45:f7:f8:68:c1:cd:9c:6a:10:85:8b:
         49:36:a5:cc:04:04:cc:d3:d0:d4:9f:f0:58:96:e0:a4:78:32:
         26:57:84:ff:cd:a0:56:d6:dc:30:73:b3:b1:8b:37:3b:7c:c6:
         22:d9:5d:4f
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWD0zw8D8XiwiXaelsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTUxMzJmMzMtZWJjYS00Yzg4LTljM2MtODIyNWM2YTAw
OWFkMB4XDTIyMDMxMTE2MzExM1oXDTMyMDMxMTE2MzExM1owPTE7MDkGA1UEAxMy
ZmExNDEzMDQ3YmZhMDc5ZGRmMzdlOWNlZWE4OGNjNmZmYjljMTZkYjg0ZDExNmI2
ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmrLnxskQlWgBElV4Q
Gw4Zc0JL4Dhm6TaP6eBt/Kc7llPB7QTMNowh+9eqp8UeJDGy4KfX2UA31sjOaMCj
VKZ/x7KiEbO/JrrP1SBSk3NjEQdwQUFDqbmOQ32B3O7yj6vEq6Zy1GduTgrRoy7I
QWoDR1rJUS12SR7tsXcLHU0Say/q+AECxLQgP8SBoOeAaoB9T4LEjIkk+tIKLdzK
sW0HsGRFvoOti/P4lBL1/sUUuiEUi1WhR0ocb4VsSqG52NHUW4zfurBXuM3uxtMW
p5YePSBe3Ug1tJEMWNlQQC5TInnEMoAfpiXPys5cCEtEKOPk/kIfPo1dIKpZryQk
+LUVAgMBAAGjggNjMIIDXzAdBgNVHQ4EFgQU6Lt82sUgVHYVx9jTSlZMpz7mOFgw
geEGCCsGAQUFBwELBIHUMIHRMDMGCCsGAQUFBzAFhidyc3luYzovL3Jwa2kuYXVn
dXN0LnR3L3JlcG8vbG9jYWxuYW1lLzIwYAYIKwYBBQUHMAqGVHJzeW5jOi8vcnBr
aS5hdWd1c3QudHcvcmVwby9sb2NhbG5hbWUvMi9FOEJCN0NEQUM1MjA1NDc2MTVD
N0Q4RDM0QTU2NENBNzNFRTYzODU4Lm1mdDA4BggrBgEFBQcwDYYsaHR0cHM6Ly9y
cGtpLmF1Z3VzdC50dy9ycmRwL25vdGlmaWNhdGlvbi54bWwwDwYDVR0TAQH/BAUw
AwEB/zCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHFcnN5bmM6Ly9ycGtpLmFyaW4u
bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i
MDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05NjcyLTRjZDktYWNjZS0xMzcyMjdl
OTcxYWMvOTUxMzJmMzMtZWJjYS00Yzg4LTljM2MtODIyNWM2YTAwOWFkLzk1MTMy
ZjMzLWViY2EtNGM4OC05YzNjLTgyMjVjNmEwMDlhZC5jcmwwHwYDVR0jBBgwFoAU
aq4q+fNL7gGMAc+NRvdrN2lYYQgwDgYDVR0PAQH/BAQDAgEGMIHABggrBgEFBQcB
AQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85
NTEzMmYzMy1lYmNhLTRjODgtOWMzYy04MjI1YzZhMDA5YWQuY2VyMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJgbBQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIYzMbW76+YcJUnbzb
Q4HsYepg3QL23rSWtDXF0/Lk9w3W3/anEalnsBhJqv4AOXUD+F9XaYNgMLfBPmeR
4tcRr8qcFkHUGF8ODH/tlPCTY4PsI0HFCaRzvCIRpjB2zDl0/F+6oDJae01mST0L
zgC/YfU+YiDK6rJAnXhNd78zfGmXHoyWrxU0Jf2jYHqF6Au9HlYg3eHVZbT97YBa
n94OX5pn3HuDVAh9A52TxkezYlWihhNBNAg97TroH81aMxAxbC14COh57f+EkAkM
Rff4aMHNnGoQhYtJNqXMBATM09DUn/BYluCkeDImV4T/zaBW1twwc7Oxizc7fMYi
2V1P
-----END CERTIFICATE-----