Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
File:                     278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer (raw, json)
Hash identifier:          rNV8mUmzJO0tzUP3DHSM3V+ftfJCA5qvc6H8OyAzdB4=
Subject key identifier:   91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority key identifier: 9C:4D:CE:D8:5F:B6:82:70:6C:94:DA:1C:4D:85:F8:81:4E:8F:70:B4
Certificate issuer:       /CN=73f21c2b-8823-4c24-b25b-43c80cb6d1bb
Certificate serial:       010D0C9F4328583E50C40BB8CADCFA055B1C6300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/manifest.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/b68a32ee-455d-483a-943d-1a5be748bfea/notification.xml
Certificate not before:   Tue 21 Jun 2022 18:37:11 +0000
Certificate not after:    Mon 23 Sep 2024 18:37:11 +0000
Subordinate resources:    AS: 400098
                          IP: 199.36.120.0/22
                          IP: 2605:c040::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:50:c4:0b:b8:ca:dc:fa:05:5b:1c:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f21c2b-8823-4c24-b25b-43c80cb6d1bb
        Validity
            Not Before: Jun 21 18:37:11 2022 GMT
            Not After : Sep 23 18:37:11 2024 GMT
        Subject: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5a:40:75:24:dc:86:3a:82:53:e7:08:7f:3b:
                    8d:00:3f:9f:8f:8e:27:df:98:4d:ce:91:63:b1:f6:
                    90:11:8f:42:31:23:fc:e0:98:52:e3:cd:20:1f:29:
                    d8:59:7a:72:fe:23:5c:6b:28:3c:fc:76:35:d6:aa:
                    e9:6d:db:46:33:4d:df:fc:df:c8:cc:b8:e2:0a:b3:
                    89:38:3a:77:55:0c:4b:63:27:49:26:bd:ca:c0:31:
                    60:91:c2:1f:50:4e:d8:37:56:88:8e:65:30:07:5c:
                    55:50:5f:06:20:96:94:9d:91:52:72:c9:82:25:7e:
                    cc:b6:40:4a:c2:36:54:7e:3b:ff:49:94:38:c7:c2:
                    7c:e7:c7:36:fb:6b:84:94:36:ef:c9:2a:00:33:87:
                    58:d6:e6:21:c5:ca:12:d6:dd:03:2b:c9:1d:ff:2c:
                    6e:83:cf:c8:7c:66:df:54:7b:0b:02:d8:4a:ee:74:
                    50:dd:72:c1:b6:92:87:5a:b9:21:f3:ea:09:dc:24:
                    3d:e9:e0:54:35:26:50:68:6c:35:d5:0d:a4:a5:77:
                    8d:74:79:06:cd:e3:68:14:89:e0:32:b5:86:57:92:
                    17:80:2d:60:c5:02:17:20:77:af:84:1f:a0:30:bc:
                    b9:6f:48:88:d1:0c:7c:bd:e9:7f:64:54:ee:a8:e4:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/manifest.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/b68a32ee-455d-483a-943d-1a5be748bfea/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/73f21c2b-8823-4c24-b25b-43c80cb6d1bb.crl

            X509v3 Authority Key Identifier:
                keyid:9C:4D:CE:D8:5F:B6:82:70:6C:94:DA:1C:4D:85:F8:81:4E:8F:70:B4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/22
                IPv6:
                  2605:c040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400098

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:8d:14:02:f4:40:04:71:d5:27:a8:db:f6:a5:e9:16:e1:60:
         33:da:5b:6f:5e:46:f5:77:7f:fb:7a:01:e0:fe:25:84:41:fe:
         a8:3b:00:c5:ad:de:fc:ab:29:57:31:33:51:37:2d:6d:86:56:
         09:da:8a:36:4c:4a:37:74:75:eb:28:ae:9d:33:46:e5:c4:0e:
         8e:fa:83:b5:4f:1c:fa:4e:5a:83:c5:0f:f4:fc:b4:f5:8e:e9:
         c1:3a:27:b3:2a:62:e7:a3:1d:21:ef:34:ca:ee:8a:af:f7:02:
         ac:62:ae:ac:66:5d:b4:a0:a1:75:cc:00:ea:02:4a:43:db:72:
         bf:d2:2d:23:3a:85:3e:ce:63:51:9a:6d:4b:36:52:df:60:d8:
         5a:b5:95:eb:0c:92:6d:dc:66:07:eb:1b:35:61:7e:ac:5a:7e:
         c7:a2:a6:ea:4d:08:d9:f6:a6:25:14:b7:91:e6:32:57:4d:f2:
         f8:a0:a0:90:bd:12:28:70:6c:85:4d:57:0d:fe:3e:f6:98:ea:
         c6:d8:66:fb:98:7a:e6:58:f4:6c:d5:f5:71:6a:96:1e:22:54:
         a8:0b:a6:ca:f4:e0:a8:0a:4a:43:7f:77:1a:26:ea:3a:d5:35:
         17:61:3a:5b:31:6c:1d:b3:c8:f4:c0:0a:b3:eb:d8:b6:ea:81:
         f0:b9:85:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----