Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer
File:                     fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4.cer (raw, json)
Hash identifier:          BtQqc4iLGALgDpvcJ4fkoHOxSjmgDM1aSQ7mbpHFiG4=
Subject key identifier:   39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
Authority key identifier: 62:88:28:01:73:74:FA:6A:E1:A5:E2:71:47:CC:0B:B7:EF:83:B0:0C
Certificate issuer:       /CN=01981e40-8b3b-42b0-8a4a-8a24285eb702
Certificate serial:       010D0C9F432858404CF66845D44DFF86BBAC9600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 20 Dec 2022 19:29:18 +0000
Certificate not after:    Mon 24 Mar 2025 18:29:18 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:4c:f6:68:45:d4:4d:ff:86:bb:ac:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01981e40-8b3b-42b0-8a4a-8a24285eb702
        Validity
            Not Before: Dec 20 19:29:18 2022 GMT
            Not After : Mar 24 18:29:18 2025 GMT
        Subject: CN=fcb20f596621a03be1423173f4f184641389d3a5b518bd84d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:26:2f:e0:de:1b:6c:49:a3:3b:f7:99:61:
                    bb:08:20:89:4b:a6:c5:3f:4e:3d:5c:fb:39:fb:79:
                    af:25:b1:46:de:3c:58:80:b5:70:b2:81:e3:f7:cf:
                    c7:d0:30:76:9f:bf:3f:28:f1:d8:40:cb:a0:c1:01:
                    f4:56:75:e3:a1:41:3d:da:98:50:43:d7:f7:d2:c2:
                    e3:49:e8:e2:a8:40:5d:65:7c:a6:97:06:22:6b:18:
                    71:e3:91:bb:13:44:06:53:a7:6d:b9:a6:12:f8:17:
                    c7:25:87:bb:19:1b:85:53:b9:7a:91:58:38:ab:1f:
                    77:8c:26:3b:89:42:3d:70:97:d7:ae:be:5d:8a:90:
                    b2:e3:0a:18:07:69:a4:af:e1:20:4a:7e:dd:74:31:
                    55:1f:97:13:29:cf:de:06:94:10:24:be:84:f8:19:
                    a2:a6:45:30:05:ea:c9:73:4d:7e:a5:9d:93:c4:7f:
                    da:5e:01:38:72:a0:46:b3:ae:e8:37:b1:95:36:d2:
                    54:07:b6:30:d5:4b:27:c5:d8:e1:20:54:a9:fb:05:
                    21:78:fb:77:57:66:ef:53:19:dc:9d:b8:6d:c5:e3:
                    3c:54:99:bf:e5:56:d1:03:b8:dc:e9:ab:33:f8:37:
                    98:d1:84:d6:03:77:4e:5c:87:22:d9:44:3d:46:25:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:25:B3:8E:ED:39:9B:56:23:C1:24:74:0A:2C:EA:27:5F:3D:FB:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101850c8e2c871df9/0/3925B38EED399B5623C124740A2CEA275F3DFBE1.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702/01981e40-8b3b-42b0-8a4a-8a24285eb702.crl

            X509v3 Authority Key Identifier:
                keyid:62:88:28:01:73:74:FA:6A:E1:A5:E2:71:47:CC:0B:B7:EF:83:B0:0C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/01981e40-8b3b-42b0-8a4a-8a24285eb702.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:99:77:a7:01:87:85:0d:a7:56:bd:22:d5:90:3d:77:1b:
         4f:da:98:3c:91:26:5f:70:15:99:f8:97:85:62:b0:0f:73:be:
         6e:2c:30:ff:d5:0a:38:5a:b6:0d:81:1c:17:af:55:9c:17:30:
         f7:78:e2:c7:76:4a:c1:54:25:e3:7e:86:51:4e:e0:05:3e:3b:
         fb:3d:68:58:c8:ad:63:48:ab:5f:d2:c1:2c:22:21:6f:b2:51:
         65:c9:0c:f3:83:f7:7b:ab:0e:fe:9d:21:91:63:2a:0e:db:0b:
         6d:3a:52:96:36:78:1f:89:76:3c:4a:cc:8f:69:e7:15:37:5d:
         b3:a7:9f:85:a2:e4:88:21:a0:38:7a:d3:45:65:a2:a3:e3:3b:
         6c:2e:2f:53:32:02:a9:99:c7:f0:23:eb:39:a7:cc:a0:e3:2e:
         c3:86:39:ed:92:1d:e4:06:a5:a0:27:e6:eb:54:7d:5a:07:bb:
         50:eb:c2:33:23:49:b1:b6:04:56:e1:d7:dc:b0:51:aa:d8:54:
         90:e9:7a:73:66:2a:24:07:f2:c5:dd:0e:12:81:d4:23:9f:43:
         1a:1a:91:dc:8f:0e:c9:90:e6:cb:fc:cf:22:82:34:d5:cf:1d:
         13:f9:4d:47:ab:30:2e:91:2b:a7:11:ff:8f:26:40:87:e9:13:
         44:b1:eb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:16 2023 by rpki-client on console-ams.rpki-client.org