Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
File:                     fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer (raw, json)
Hash identifier:          /z1/XfaSbIUpba/SyW29nABH61MOTo4efmnCSo/b+Uo=
Subject key identifier:   F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority key identifier: 73:64:71:F5:8F:53:BF:3F:78:67:6C:B4:EF:7A:D0:DD:2D:A7:79:0C
Certificate issuer:       /CN=c8d421ac-3103-47a1-91ac-ed4e287bc3c8
Certificate serial:       010D0C9F4328583E18F3C11A3CBB60B201FC7C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 01 Jun 2022 18:48:03 +0000
Certificate not after:    Tue 03 Sep 2024 18:48:03 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:18:f3:c1:1a:3c:bb:60:b2:01:fc:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8d421ac-3103-47a1-91ac-ed4e287bc3c8
        Validity
            Not Before: Jun  1 18:48:03 2022 GMT
            Not After : Sep  3 18:48:03 2024 GMT
        Subject: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:a6:b6:1d:e0:49:ba:c4:a6:cd:ed:a8:51:
                    34:7c:aa:a2:04:4c:df:f7:64:a2:c5:7d:92:a3:ff:
                    9f:81:63:70:bb:d0:d5:75:49:df:47:3a:7d:18:c7:
                    13:b3:37:70:75:b9:95:51:0f:60:cc:84:ce:98:24:
                    71:14:88:2d:52:b6:56:7d:a9:21:d1:5b:1e:55:57:
                    0c:b9:9e:fd:63:9b:c5:49:4d:28:ad:71:e5:27:e9:
                    51:b4:cb:45:3e:e8:6c:25:e3:3d:45:b6:26:a0:fb:
                    a9:cf:b3:b9:80:d0:8c:94:12:0c:7a:ee:07:8d:f9:
                    a5:7f:c1:69:11:98:07:39:7b:6e:81:81:d1:74:95:
                    f6:c5:98:84:4e:59:ee:b5:ce:ea:50:f7:f0:d6:93:
                    40:56:ab:88:14:5d:aa:49:54:85:71:f0:10:da:1d:
                    8a:e4:76:93:a1:fc:0e:c0:24:c8:a1:ee:ab:43:61:
                    52:03:87:d2:f7:e1:1d:47:b4:20:f4:b1:ac:60:5e:
                    c5:6b:59:df:cd:4b:39:5f:52:c3:d4:19:b4:39:13:
                    7f:c9:a8:08:9f:b5:5d:e9:91:3a:9e:b0:a4:ec:bc:
                    fe:84:4c:e3:9d:98:5e:fb:5a:3c:a1:a7:e8:43:0e:
                    81:17:75:9c:e4:92:91:c3:79:91:98:83:c5:ba:d6:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/c8d421ac-3103-47a1-91ac-ed4e287bc3c8.crl

            X509v3 Authority Key Identifier:
                keyid:73:64:71:F5:8F:53:BF:3F:78:67:6C:B4:EF:7A:D0:DD:2D:A7:79:0C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1a:74:2c:35:34:7c:47:61:6e:64:ef:ae:48:92:87:04:1a:
         e7:28:14:eb:ce:0f:05:03:e4:b8:d1:4c:cb:cd:f7:37:3e:f9:
         78:9e:20:e1:64:5a:19:63:74:5f:d8:23:0b:13:97:35:0a:25:
         32:5c:00:28:15:b1:15:3b:60:bf:13:46:f9:14:20:b5:6f:dd:
         aa:fc:98:dc:b7:62:ef:e8:65:60:63:b7:21:0b:45:e4:b5:c6:
         80:83:cb:2f:20:70:df:76:13:f8:74:48:06:d0:f1:ac:9d:cb:
         8f:c8:32:39:ee:a8:20:7c:fa:f3:67:a8:df:86:1b:92:08:af:
         4f:33:c5:55:d2:ee:4b:47:69:a9:0e:70:d5:38:64:2d:18:e3:
         70:7a:f4:13:ba:17:36:63:5f:65:5a:9e:5c:e5:7c:f1:8e:d1:
         db:2f:79:5e:db:85:55:73:3c:bd:0a:85:3c:da:5b:0b:cd:5e:
         f6:f1:19:f7:95:9a:4a:ef:89:47:c3:d7:4f:62:ff:c4:03:fd:
         e0:52:6e:6d:3e:43:61:33:a3:82:2e:80:bb:86:c3:e6:04:e8:
         d7:86:b0:3c:e9:3e:76:8d:49:f2:f9:d0:73:85:1b:05:cd:2b:
         ef:30:1a:53:37:27:d6:a3:14:a3:6b:e5:aa:de:c0:e6:79:a8:
         9c:b0:2b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:40 2023 by rpki-client on console-ams.rpki-client.org