Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/797BAE24745221A853AB73740CEA75853E5E584A.cer
File:                     797BAE24745221A853AB73740CEA75853E5E584A.cer (raw, json)
Hash identifier:          5PQxKCG1IsvS5tO9AVu64jbyPXufyeEee8MfqtP5kwU=
Subject key identifier:   79:7B:AE:24:74:52:21:A8:53:AB:73:74:0C:EA:75:85:3E:5E:58:4A
Authority key identifier: 26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F
Certificate issuer:       /CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
Certificate serial:       74823715ED0F87AD71A66AE73BAA2F617C5B7F91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer
Manifest:                 rsync://rpki.co/repo/HYSP/11/797BAE24745221A853AB73740CEA75853E5E584A.mft
caRepository:             rsync://rpki.co/repo/HYSP/11
Notify URL:               https://rpki.co/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 11:27:22 +0000
Certificate not after:    Sat 06 Apr 2024 11:32:22 +0000
Subordinate resources:    IP: 104.37.42.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:82:37:15:ed:0f:87:ad:71:a6:6a:e7:3b:aa:2f:61:7c:5b:7f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
        Validity
            Not Before: Apr  8 11:27:22 2023 GMT
            Not After : Apr  6 11:32:22 2024 GMT
        Subject: CN=797BAE24745221A853AB73740CEA75853E5E584A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:89:b4:9f:3e:cd:37:1d:f8:12:ba:c9:ce:
                    7f:8a:b9:3b:a8:c7:84:c9:0c:09:41:3d:5b:3e:b8:
                    5b:15:cd:2e:3e:22:fc:cc:a1:08:6e:fb:36:36:a5:
                    2f:28:e6:fa:1a:0d:b4:a9:53:a4:03:77:05:92:2c:
                    1c:c7:f0:36:f3:4e:13:64:33:0d:be:f4:c7:4a:1c:
                    b0:11:d8:dd:54:7c:4d:84:26:0b:2c:d1:fc:6f:7d:
                    39:0d:55:4b:67:13:72:6b:2a:e4:f7:22:98:3c:bf:
                    9d:8b:b8:7b:82:d3:56:be:5f:f2:a7:74:9f:e6:a8:
                    5d:1d:2d:58:89:2b:d4:c3:01:19:04:33:fc:59:56:
                    5a:f0:8c:f7:fd:43:0b:3e:6f:fe:93:ce:77:a6:0a:
                    ee:41:8d:81:33:68:98:b7:05:50:33:94:fe:a1:ae:
                    63:94:c8:8f:08:b6:ae:d3:c4:25:3e:02:03:c5:d6:
                    13:ee:33:11:d7:32:f3:bd:ae:03:59:e2:7a:06:70:
                    27:44:f2:2a:33:d3:df:7e:f6:f5:81:f5:7f:8f:01:
                    b7:c1:44:3d:e8:5e:42:47:07:2b:45:12:0d:9a:a4:
                    c7:2c:1a:de:f7:8d:b5:8f:23:4a:47:92:ee:27:c0:
                    1a:e4:da:07:b7:d4:e7:b9:ba:27:f7:af:2f:d1:83:
                    aa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:7B:AE:24:74:52:21:A8:53:AB:73:74:0C:EA:75:85:3E:5E:58:4A
            X509v3 Authority Key Identifier:
                keyid:26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/267181B0A5DD38D60BCC22881342C64FFC8CBC1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.co/repo/HYSP/11
                RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/11/797BAE24745221A853AB73740CEA75853E5E584A.mft
                RPKI Notify - URI:https://rpki.co/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:2b:ec:a8:69:a6:57:af:8c:b0:de:62:a1:e7:c3:5c:28:25:
         15:3d:4c:aa:42:31:be:fa:19:6f:f0:30:42:dd:ec:c4:c7:20:
         c3:9a:8b:d5:1c:2b:b1:33:14:9a:de:67:aa:46:59:55:24:1f:
         ba:7f:59:b6:9a:31:82:e5:c7:dc:f8:5b:1f:1e:5e:0e:f1:73:
         35:bd:5a:5f:e8:f6:ce:4b:6b:5b:78:5b:f8:2f:8a:74:bc:90:
         cd:c2:19:ad:00:05:2a:26:33:10:f6:3d:b8:d4:ae:88:5b:40:
         7b:31:40:df:35:3f:84:8e:50:cb:ac:43:75:46:54:d9:32:85:
         4f:71:0b:66:d4:9b:c5:46:27:37:fc:2a:07:93:4e:15:1f:be:
         ca:79:e9:44:03:4d:56:2e:88:14:f3:89:bf:98:f8:f4:68:c4:
         33:96:20:8e:0d:3f:ac:93:03:bb:f2:3e:b0:74:82:40:db:cc:
         59:0d:35:eb:6e:2e:28:86:f0:57:fe:75:c7:91:41:86:4d:23:
         d0:44:5c:64:46:74:5b:6d:44:58:9b:fb:e1:a4:b2:33:04:c7:
         dd:eb:28:e8:53:69:7e:ef:0f:ec:c6:8a:44:de:92:55:4d:b0:
         10:e9:a3:2e:40:13:07:1a:ca:6b:94:67:69:10:9a:0f:c4:d7:
         e3:97:56:e6
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgIUdII3Fe0Ph61xpmrnO6ovYXxbf5EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJiYTNmNTI1NGJiZmI1YjMyYjRjYTQ0MjhlYzY3YjJk
ZWU0NGMyODgxMDM3ZWIwNTUwHhcNMjMwNDA4MTEyNzIyWhcNMjQwNDA2MTEzMjIy
WjAzMTEwLwYDVQQDEyg3OTdCQUUyNDc0NTIyMUE4NTNBQjczNzQwQ0VBNzU4NTNF
NUU1ODRBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QGJtJ8+zTcd
+BK6yc5/irk7qMeEyQwJQT1bPrhbFc0uPiL8zKEIbvs2NqUvKOb6Gg20qVOkA3cF
kiwcx/A2804TZDMNvvTHShywEdjdVHxNhCYLLNH8b305DVVLZxNyayrk9yKYPL+d
i7h7gtNWvl/yp3Sf5qhdHS1YiSvUwwEZBDP8WVZa8Iz3/UMLPm/+k853pgruQY2B
M2iYtwVQM5T+oa5jlMiPCLau08QlPgIDxdYT7jMR1zLzva4DWeJ6BnAnRPIqM9Pf
fvb1gfV/jwG3wUQ96F5CRwcrRRINmqTHLBre9421jyNKR5LuJ8Aa5NoHt9Tnubon
968v0YOq7QIDAQABo4IC5TCCAuEwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU
eXuuJHRSIahTq3N0DOp1hT5eWEowHwYDVR0jBBgwFoAUJnGBsKXdONYLzCKIE0LG
T/yMvB8wDgYDVR0PAQH/BAQDAgEGMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzov
L3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAx
ODIzYmQ0NTQ3NTJiZTYvMC8yNjcxODFCMEE1REQzOEQ2MEJDQzIyODgxMzQyQzY0
RkZDOENCQzFGLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1hNzlh
LTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwNjVhY2MtYmVlZC00MTE1LWJjNmMt
NjNkZTIzMmYyYTA0LzAyYmEzZjUyNTRiYmZiNWIzMmI0Y2E0NDI4ZWM2N2IyZGVl
NDRjMjg4MTAzN2ViMDU1LmNlcjCBxAYIKwYBBQUHAQsEgbcwgbQwKAYIKwYBBQUH
MAWGHHJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvMTEwVQYIKwYBBQUHMAqGSXJz
eW5jOi8vcnBraS5jby9yZXBvL0hZU1AvMTEvNzk3QkFFMjQ3NDUyMjFBODUzQUI3
Mzc0MENFQTc1ODUzRTVFNTg0QS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBr
aS5jby9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWglKjANBgkqhkiG9w0B
AQsFAAOCAQEAMyvsqGmmV6+MsN5ioefDXCglFT1MqkIxvvoZb/AwQt3sxMcgw5qL
1RwrsTMUmt5nqkZZVSQfun9ZtpoxguXH3PhbHx5eDvFzNb1aX+j2zktrW3hb+C+K
dLyQzcIZrQAFKiYzEPY9uNSuiFtAezFA3zU/hI5Qy6xDdUZU2TKFT3ELZtSbxUYn
N/wqB5NOFR++ynnpRANNVi6IFPOJv5j49GjEM5Ygjg0/rJMDu/I+sHSCQNvMWQ01
624uKIbwV/51x5FBhk0j0ERcZEZ0W21EWJv74aSyMwTH3eso6FNpfu8P7MaKRN6S
VU2wEOmjLkATBxrKa5RnaRCaD8TX45dW5g==
-----END CERTIFICATE-----