Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f3bd5489afd5643a13474b5087d800f88f5699495.cer
File:                     278aab878f3bd5489afd5643a13474b5087d800f88f5699495.cer (raw, json)
Hash identifier:          2DojIPrDN/CmqIwYBn980Fh1vFA668bOv8s36uq7Xsc=
Subject key identifier:   41:99:DD:66:B6:25:84:59:62:1D:E3:C9:B7:11:B7:71:42:EC:D5:87
Authority key identifier: 9C:4D:CE:D8:5F:B6:82:70:6C:94:DA:1C:4D:85:F8:81:4E:8F:70:B4
Certificate issuer:       /CN=73f21c2b-8823-4c24-b25b-43c80cb6d1bb
Certificate serial:       010D0C9F4328584237D10043120AE0C955714AC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/27a78657-bd91-4001-bc4a-307a87b91b14/O9VImv1WQ6E0dLUIfYAPiPVplJU.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/27a78657-bd91-4001-bc4a-307a87b91b14/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/27a78657-bd91-4001-bc4a-307a87b91b14/notification.xml
Certificate not before:   Wed 14 Jun 2023 15:15:50 +0000
Certificate not after:    Tue 16 Sep 2025 15:15:50 +0000
Subordinate resources:    AS: 400098
                          IP: 199.36.120.0/22
                          IP: 2605:c040::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:37:d1:00:43:12:0a:e0:c9:55:71:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f21c2b-8823-4c24-b25b-43c80cb6d1bb
        Validity
            Not Before: Jun 14 15:15:50 2023 GMT
            Not After : Sep 16 15:15:50 2025 GMT
        Subject: CN=278aab878f3bd5489afd5643a13474b5087d800f88f5699495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:02:41:75:72:1d:7c:02:8a:00:3d:fc:ae:
                    34:ca:c7:d5:74:b7:0c:57:42:7c:90:7b:27:56:84:
                    8c:d7:df:06:6f:ee:19:1c:ee:48:98:6e:e6:5c:ec:
                    3f:38:28:eb:14:bb:6b:44:c3:98:99:3f:0b:fd:8b:
                    40:37:4a:2f:09:4d:87:85:72:2a:c7:77:54:78:8b:
                    01:93:bd:67:08:24:bd:66:34:b9:ad:e1:cd:d7:46:
                    65:3f:1a:aa:bf:be:de:80:7c:2f:b2:80:9c:f9:88:
                    df:26:23:ea:5e:86:22:44:49:a1:e1:a6:8a:b3:c2:
                    40:61:7a:65:0c:bd:ba:92:d9:cb:72:32:96:26:ec:
                    02:e6:7e:66:f6:cc:a2:87:7e:10:2e:d8:7f:f6:d0:
                    4f:47:d2:9e:7c:b6:0d:2c:64:0f:37:c0:1b:00:a6:
                    ca:37:f8:b5:55:6a:dc:49:01:36:61:dd:df:c2:70:
                    d3:d0:46:0d:6b:f8:72:1a:47:1f:16:3c:6b:4e:55:
                    27:2a:37:e0:cf:c5:35:0f:65:09:89:64:45:e9:6c:
                    f8:69:01:97:cb:7f:83:56:9e:c6:44:d7:f3:b0:6c:
                    43:1e:d5:c2:22:02:51:ce:e9:53:ff:45:70:60:0c:
                    92:a7:b2:38:d9:e5:7d:2d:81:c6:2f:65:a1:c1:18:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:99:DD:66:B6:25:84:59:62:1D:E3:C9:B7:11:B7:71:42:EC:D5:87
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/27a78657-bd91-4001-bc4a-307a87b91b14/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/27a78657-bd91-4001-bc4a-307a87b91b14/O9VImv1WQ6E0dLUIfYAPiPVplJU.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/27a78657-bd91-4001-bc4a-307a87b91b14/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/73f21c2b-8823-4c24-b25b-43c80cb6d1bb.crl

            X509v3 Authority Key Identifier:
                keyid:9C:4D:CE:D8:5F:B6:82:70:6C:94:DA:1C:4D:85:F8:81:4E:8F:70:B4

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/22
                IPv6:
                  2605:c040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400098

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:e9:7d:80:ff:ea:f4:47:75:35:c5:f4:1e:cb:18:59:72:c6:
         2d:db:3d:3e:b4:2e:b0:71:0a:70:3f:5f:44:f6:60:4f:49:0a:
         42:76:75:d0:9b:50:bc:9e:41:e5:8b:27:a9:47:de:13:7b:4b:
         ee:ee:4c:9c:31:b2:36:c1:ed:6b:f8:5f:9c:8b:af:07:44:45:
         70:10:cf:ad:da:30:83:41:81:bb:07:38:38:76:ca:cd:b8:16:
         ca:98:cb:3a:ab:f6:8c:41:a3:de:50:5a:3c:08:a3:b3:1d:78:
         c3:7a:15:c7:1a:84:92:61:62:05:70:80:f9:c7:c1:20:38:e4:
         0a:80:d6:d9:99:8b:16:0b:86:cb:37:61:e6:44:77:af:66:06:
         f7:9d:f5:75:a3:2c:34:eb:a8:72:73:85:b3:f2:a7:a9:71:fb:
         c7:e3:4d:43:d2:73:0b:b4:72:6a:97:d9:35:42:8a:2e:e5:cb:
         9a:35:eb:4e:0e:9a:12:38:0e:a8:9f:bf:16:df:f1:b7:85:d1:
         b2:50:d5:25:30:47:48:ba:a3:47:12:9a:be:87:fb:8a:2d:15:
         1d:52:15:c6:12:f0:df:09:3a:ca:c6:e9:e5:41:3b:e9:a5:f5:
         b3:d4:39:af:df:cf:63:59:2f:68:0d:84:82:dc:6e:fb:df:44:
         5c:de:e6:39
-----BEGIN CERTIFICATE-----
MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEI30QBDEgrgyVVxSsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNmMjFjMmItODgyMy00YzI0LWIyNWItNDNjODBjYjZk
MWJiMB4XDTIzMDYxNDE1MTU1MFoXDTI1MDkxNjE1MTU1MFowPTE7MDkGA1UEAxMy
Mjc4YWFiODc4ZjNiZDU0ODlhZmQ1NjQzYTEzNDc0YjUwODdkODAwZjg4ZjU2OTk0
OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClVQJBdXIdfAKKAD38
rjTKx9V0twxXQnyQeydWhIzX3wZv7hkc7kiYbuZc7D84KOsUu2tEw5iZPwv9i0A3
Si8JTYeFcirHd1R4iwGTvWcIJL1mNLmt4c3XRmU/Gqq/vt6AfC+ygJz5iN8mI+pe
hiJESaHhpoqzwkBhemUMvbqS2ctyMpYm7ALmfmb2zKKHfhAu2H/20E9H0p58tg0s
ZA83wBsApso3+LVVatxJATZh3d/CcNPQRg1r+HIaRx8WPGtOVScqN+DPxTUPZQmJ
ZEXpbPhpAZfLf4NWnsZE1/OwbEMe1cIiAlHO6VP/RXBgDJKnsjjZ5X0tgcYvZaHB
GP1DAgMBAAGjggQbMIIEFzAdBgNVHQ4EFgQUQZndZrYlhFliHePJtxG3cULs1Ycw
ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt
cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzI3YTc4NjU3LWJk
OTEtNDAwMS1iYzRhLTMwN2E4N2I5MWIxNC8wgYIGCCsGAQUFBzAKhnZyc3luYzov
L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzI3YTc4
NjU3LWJkOTEtNDAwMS1iYzRhLTMwN2E4N2I5MWIxNC9POVZJbXYxV1E2RTBkTFVJ
ZllBUGlQVnBsSlUubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51
cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwLzI3YTc4NjU3LWJkOTEtNDAwMS1i
YzRhLTMwN2E4N2I5MWIxNC9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB
Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l
dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4
Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzLzczZjIxYzJiLTg4MjMtNGMyNC1iMjViLTQzYzgwY2I2ZDFiYi83M2YyMWMy
Yi04ODIzLTRjMjQtYjI1Yi00M2M4MGNiNmQxYmIuY3JsMB8GA1UdIwQYMBaAFJxN
zthftoJwbJTaHE2F+IFOj3C0MA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE
gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z
aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk
YTIxNTdkMy8wMzU3MjcyYy1hNzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzNm
MjFjMmItODgyMy00YzI0LWIyNWItNDNjODBjYjZkMWJiLmNlcjAuBggrBgEFBQcB
BwEB/wQfMB0wDAQCAAEwBgMEAsckeDANBAIAAjAHAwUAJgXAQDAaBggrBgEFBQcB
CAEB/wQLMAmgBzAFAgMGGuIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYul9gP/q9Ed1NcX0HssYWXLGLds9
PrQusHEKcD9fRPZgT0kKQnZ10JtQvJ5B5YsnqUfeE3tL7u5MnDGyNsHta/hfnIuv
B0RFcBDPrdowg0GBuwc4OHbKzbgWypjLOqv2jEGj3lBaPAijsx14w3oVxxqEkmFi
BXCA+cfBIDjkCoDW2ZmLFguGyzdh5kR3r2YG9531daMsNOuocnOFs/KnqXH7x+NN
Q9JzC7RyapfZNUKKLuXLmjXrTg6aEjgOqJ+/Ft/xt4XRslDVJTBHSLqjRxKavof7
ii0VHVIVxhLw3wk6ysbp5UE76aX1s9Q5r9/PY1kvaA2Egtxu+99EXN7mOQ==
-----END CERTIFICATE-----