Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba0b3c74-a5ac-4e91-a560-17e10c45ca39/fcb20f5966d0daf479ac6c70354c317167637b5c44ed4590f6.cer
File:                     fcb20f5966d0daf479ac6c70354c317167637b5c44ed4590f6.cer (raw, json)
Hash identifier:          P3z+9SRCjRTGA/HadMOc3Wy3wyYirnCfmKWjhi+Qbko=
Subject key identifier:   7F:90:43:9C:B3:4F:4D:F6:53:95:27:76:72:EF:A6:C6:20:24:6E:EC
Authority key identifier: DF:BB:8D:CC:6D:63:F8:CB:45:FC:59:C9:E2:9C:39:9B:5A:E4:A4:11
Certificate issuer:       /CN=ba0b3c74-a5ac-4e91-a560-17e10c45ca39
Certificate serial:       010D0C9F4328584224AC29C9CD27A9B4F5498200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba0b3c74-a5ac-4e91-a560-17e10c45ca39.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade889191f601889729a5f30916/0/7F90439CB34F4DF65395277672EFA6C620246EEC.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade889191f601889729a5f30916/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 07 Jun 2023 18:41:15 +0000
Certificate not after:    Tue 09 Sep 2025 18:41:15 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:24:ac:29:c9:cd:27:a9:b4:f5:49:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0b3c74-a5ac-4e91-a560-17e10c45ca39
        Validity
            Not Before: Jun  7 18:41:15 2023 GMT
            Not After : Sep  9 18:41:15 2025 GMT
        Subject: CN=fcb20f5966d0daf479ac6c70354c317167637b5c44ed4590f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d0:26:9f:8a:23:d0:27:08:2f:47:03:8f:d5:
                    d1:00:8f:ff:0f:23:bb:f1:62:ee:33:7e:18:51:af:
                    e6:65:36:6b:fb:a4:db:cf:c0:e1:84:56:60:55:3d:
                    d6:c9:06:3e:db:c5:7e:c7:7b:0a:95:fc:4f:64:23:
                    8d:87:af:1b:e6:85:3d:58:e8:40:dc:72:7e:9c:27:
                    25:5a:63:92:3d:0a:34:a7:4c:d4:b9:ce:cd:d5:8f:
                    ff:71:9f:6e:8a:c4:57:07:50:ba:76:c6:ee:a9:ab:
                    91:13:84:d1:38:91:f3:29:b2:1b:49:7f:b7:57:d6:
                    74:cd:03:ab:26:f1:14:c8:15:fa:3f:6a:77:75:e3:
                    20:09:da:b4:4b:2d:3c:5e:1f:f1:a0:44:a3:10:95:
                    ec:32:0e:51:99:bb:ca:92:02:09:89:51:0a:8e:3c:
                    6c:8e:4e:13:81:04:44:7d:36:13:b4:96:d1:a0:82:
                    99:40:9d:8b:84:9a:e2:86:bf:3a:83:20:e7:b4:d4:
                    18:b4:02:56:c9:8e:42:2b:ed:b8:93:25:b5:38:2d:
                    9b:b6:05:2f:a5:74:b9:7a:7c:e3:75:ab:f9:5f:ec:
                    46:60:e1:43:4b:9e:4a:5a:9c:8f:11:d6:37:02:e6:
                    f2:a2:99:a9:b4:81:26:ff:34:56:9f:b4:ce:d0:4c:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:90:43:9C:B3:4F:4D:F6:53:95:27:76:72:EF:A6:C6:20:24:6E:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade889191f601889729a5f30916/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade889191f601889729a5f30916/0/7F90439CB34F4DF65395277672EFA6C620246EEC.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba0b3c74-a5ac-4e91-a560-17e10c45ca39/ba0b3c74-a5ac-4e91-a560-17e10c45ca39.crl

            X509v3 Authority Key Identifier:
                keyid:DF:BB:8D:CC:6D:63:F8:CB:45:FC:59:C9:E2:9C:39:9B:5A:E4:A4:11

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba0b3c74-a5ac-4e91-a560-17e10c45ca39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e7:83:ca:0a:a6:39:f3:ad:a2:78:05:cd:65:69:34:e7:3b:
         10:5e:e7:19:9a:1c:de:9a:59:c7:89:2f:21:b7:4d:85:5f:bc:
         79:c1:6e:c9:0b:98:e1:a0:91:9e:28:27:d8:7a:73:50:9d:9a:
         c0:2c:6a:68:e1:59:ba:3f:ed:22:b9:26:5e:f7:1b:ca:9a:27:
         eb:19:68:18:64:11:cc:51:40:bb:63:77:65:cf:99:f6:f5:0d:
         c8:38:2a:3d:74:07:64:5f:ed:02:41:80:58:6b:ea:f3:8a:37:
         8a:db:a0:33:28:42:aa:8b:98:dc:10:19:0b:17:49:cc:f5:1c:
         77:6c:01:99:bf:fb:4b:2c:b3:1e:86:e1:17:8a:a0:72:3e:4c:
         20:c2:70:a4:f8:b6:0e:06:19:ce:bd:e3:bd:3f:25:97:08:19:
         0f:b2:69:3c:7b:6d:58:24:b3:62:81:6d:e5:6b:1e:f8:4e:40:
         66:a2:ec:a9:cf:4b:a8:5d:2c:8d:c1:3a:43:f0:d5:11:93:2e:
         e2:a7:d5:13:a9:79:67:0c:47:ed:2e:00:2a:f3:52:ac:1d:ad:
         b1:f1:17:da:b6:3d:6a:b0:6f:a7:69:0f:4a:da:a2:dc:04:ca:
         9c:7d:81:4a:c2:1d:ad:6f:b3:df:82:fe:93:bd:8b:b6:ed:2a:
         84:88:bf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:51 2023 by rpki-client on console-fra.rpki-client.org