Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7cf1b87c-0c72-457f-a005-0d2e66e6ec87/fcb20f596673d76a683a52780a4c67c8bf3839359401083c80.cer
File:                     fcb20f596673d76a683a52780a4c67c8bf3839359401083c80.cer (raw, json)
Hash identifier:          U2o5nxqDsevoQ5FhtXHMnzO9fZLB44i9RigVTQCAmGQ=
Subject key identifier:   7A:BF:EE:56:33:86:64:B9:23:FD:18:9A:BE:A8:4B:AB:F6:92:BB:07
Authority key identifier: A2:D6:22:BD:AD:F0:0D:E4:45:6E:0C:CC:9C:AA:04:A4:29:23:48:D4
Certificate issuer:       /CN=7cf1b87c-0c72-457f-a005-0d2e66e6ec87
Certificate serial:       010D0C9F4328583DFF31DBD7113450F269984100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7cf1b87c-0c72-457f-a005-0d2e66e6ec87.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/7ABFEE56338664B923FD189ABEA84BABF692BB07.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Mon 23 May 2022 13:22:10 +0000
Certificate not after:    Sun 25 Aug 2024 13:22:10 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ff:31:db:d7:11:34:50:f2:69:98:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cf1b87c-0c72-457f-a005-0d2e66e6ec87
        Validity
            Not Before: May 23 13:22:10 2022 GMT
            Not After : Aug 25 13:22:10 2024 GMT
        Subject: CN=fcb20f596673d76a683a52780a4c67c8bf3839359401083c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:12:9f:fb:a6:d7:46:1d:10:30:c8:6f:e9:f6:
                    82:cf:dc:6c:70:06:c9:5d:b5:ae:56:48:d7:aa:23:
                    b7:ae:ef:9a:4d:8a:98:9a:5b:a0:15:f4:68:52:1e:
                    f7:e3:e5:1b:e3:c1:df:b9:ea:b1:47:b3:eb:d8:31:
                    e1:d2:ee:a2:07:ca:c1:96:6c:18:07:48:e3:63:cf:
                    a5:61:4d:00:f9:84:e6:8a:7b:0e:e2:7b:ef:a9:02:
                    d7:40:32:33:e0:d2:a5:27:a8:9c:b6:f6:a7:79:0f:
                    0a:9d:70:d6:20:8a:57:fd:56:39:f4:d2:15:f7:1f:
                    51:34:63:9d:f3:94:55:c3:b2:d6:47:c0:ad:17:7d:
                    c2:a5:cd:7a:01:92:2b:d1:89:92:7d:f2:59:f6:c1:
                    c1:55:57:62:dd:28:72:0c:5a:ba:58:44:6c:0f:09:
                    cc:96:71:b7:4c:fc:57:fc:d8:69:ae:06:7c:94:47:
                    08:40:91:40:98:c4:06:7b:24:c9:d0:ae:15:81:d2:
                    44:3d:ac:f2:b7:6d:41:c7:a2:ef:b4:08:82:ec:62:
                    9e:d1:97:f8:46:6f:f5:d4:42:81:f4:f5:72:2a:16:
                    be:c0:31:df:c0:ae:d2:e4:86:db:ff:dc:e5:31:2b:
                    56:99:4e:16:cd:ff:55:ec:83:5f:ee:b8:90:37:21:
                    0a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BF:EE:56:33:86:64:B9:23:FD:18:9A:BE:A8:4B:AB:F6:92:BB:07
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/7ABFEE56338664B923FD189ABEA84BABF692BB07.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7cf1b87c-0c72-457f-a005-0d2e66e6ec87/7cf1b87c-0c72-457f-a005-0d2e66e6ec87.crl

            X509v3 Authority Key Identifier:
                keyid:A2:D6:22:BD:AD:F0:0D:E4:45:6E:0C:CC:9C:AA:04:A4:29:23:48:D4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7cf1b87c-0c72-457f-a005-0d2e66e6ec87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:00:39:d3:7b:6e:6b:04:7a:ce:ed:1f:6c:0b:bb:10:c6:1b:
         fd:cd:14:a1:78:20:76:6a:07:bb:59:11:1b:be:59:22:00:e5:
         ba:70:61:75:97:6b:49:05:df:64:84:7a:db:f6:1b:63:b2:22:
         94:9a:6c:7d:a5:fa:94:c8:ea:b2:c8:32:db:de:d4:31:a5:0c:
         86:0e:ca:24:a2:ba:e0:4a:cb:e8:83:b9:62:c1:4a:75:9b:15:
         c0:19:ea:33:09:54:8d:ba:18:a9:a6:6c:cd:58:df:36:a8:f2:
         81:38:96:84:20:cb:15:65:1b:62:76:9a:b9:68:0e:9b:5b:57:
         55:ce:4b:f7:c4:d7:c4:0d:45:56:a8:08:26:f4:7d:f7:a0:2a:
         e0:1c:fe:01:c9:25:3f:93:77:3d:8e:9b:98:ff:7e:35:ce:94:
         7f:06:58:2b:a1:7a:7f:08:0e:61:a6:47:ed:85:48:7d:77:5b:
         9d:bf:33:5b:09:d3:19:a0:9d:f6:19:41:f6:8b:5a:18:c3:90:
         0d:19:8d:5b:cc:39:7c:d3:5d:3e:5a:39:3d:0a:b9:cb:7b:ae:
         8d:f3:a1:37:fe:75:a4:29:a1:fa:fa:65:47:22:e1:ce:a1:61:
         e0:b0:f1:44:8c:70:af:a2:b6:4c:68:30:84:58:e3:2b:a8:5e:
         8e:f3:46:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-ams.rpki-client.org