Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
File:                     fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer (raw, json)
Hash identifier:          iN8xqjOyCDfEzEDpCLKKOjCKs25BCABvHE7jML+JRzo=
Subject key identifier:   A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
Authority key identifier: D6:72:E4:20:89:1F:76:23:99:BE:0B:53:A2:49:35:05:19:17:56:71
Certificate issuer:       /CN=44e03c61-6e39-49a5-bb22-77cc5b0ab06f
Certificate serial:       010D0C9F43285840DE3D37B67EABEF100F8B2AC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 10 Feb 2023 20:24:11 +0000
Certificate not after:    Thu 15 May 2025 19:24:11 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:de:3d:37:b6:7e:ab:ef:10:0f:8b:2a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44e03c61-6e39-49a5-bb22-77cc5b0ab06f
        Validity
            Not Before: Feb 10 20:24:11 2023 GMT
            Not After : May 15 19:24:11 2025 GMT
        Subject: CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:73:08:98:3a:72:76:8d:83:38:99:e0:91:03:
                    67:87:55:d5:98:33:82:8e:b9:81:da:5d:3e:dd:a6:
                    90:72:93:e2:61:ff:ef:74:dd:cd:37:5f:93:91:09:
                    87:26:e5:d2:66:b5:f1:65:74:2f:f3:e2:5d:c9:f9:
                    0b:1e:5c:41:10:38:95:45:71:43:77:97:e6:04:a2:
                    0a:31:7a:ea:79:a6:27:51:82:2b:d7:c6:9d:51:c5:
                    44:16:55:6a:27:80:7c:f7:1c:d4:b8:0c:b9:ce:11:
                    41:4d:ad:e1:52:be:09:96:08:d2:ac:c2:27:55:42:
                    34:fc:a5:0e:d2:f0:cd:b4:7a:c9:b2:a1:35:08:cf:
                    b6:6f:d4:2e:bc:72:31:8b:41:34:a6:5b:e1:b0:86:
                    93:63:37:58:b0:95:3c:ef:b8:4f:d7:15:39:ee:af:
                    d4:07:1b:6b:11:85:cf:48:f4:55:70:ce:ed:58:55:
                    fd:33:17:96:da:8a:d9:26:4b:71:72:fc:bb:77:30:
                    67:69:ec:f9:6f:8b:09:c3:03:cf:8d:9d:b7:fc:e4:
                    d0:6b:44:be:7d:a0:28:12:ca:c6:fd:26:d2:17:f6:
                    f4:01:ed:18:bc:97:78:67:74:d1:2e:34:35:c8:ff:
                    09:e9:bb:81:b6:28:24:13:0a:10:6d:2b:35:25:ba:
                    83:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/44e03c61-6e39-49a5-bb22-77cc5b0ab06f.crl

            X509v3 Authority Key Identifier:
                keyid:D6:72:E4:20:89:1F:76:23:99:BE:0B:53:A2:49:35:05:19:17:56:71

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:1a:53:88:40:f4:76:5a:0d:80:e7:71:fe:56:90:6f:a1:79:
         c5:d4:69:e4:e9:2a:81:22:3d:a7:df:c4:9a:8a:9d:3b:93:bd:
         1f:7c:31:a7:a6:62:de:60:94:14:bf:ae:3b:03:b7:52:fa:42:
         34:0f:a9:c6:c7:8d:6a:2b:3a:bf:f4:6a:9a:d4:eb:2a:e8:a7:
         1c:d5:e9:40:c7:8f:da:a6:ab:b1:c8:c3:df:4b:70:16:80:55:
         14:82:71:65:61:da:f4:18:2b:3b:06:2c:a0:68:8c:ad:ca:08:
         90:bc:a3:35:8c:31:42:26:aa:06:74:04:83:fe:6f:0b:10:92:
         a4:95:e4:13:18:03:eb:f0:52:2f:b6:e1:4b:a8:46:60:77:43:
         24:02:3a:26:9e:d9:31:fd:fd:30:6a:45:0b:3b:37:20:02:9c:
         c7:28:77:70:fa:89:da:a8:07:8a:99:7e:8d:d3:c9:88:e0:fd:
         83:eb:78:fe:84:66:f9:a9:a0:11:de:4f:80:82:ef:ad:cc:10:
         39:04:2c:40:7d:2e:0e:45:1c:e8:5e:89:d0:19:30:b7:ab:dc:
         75:38:18:11:5f:65:23:33:cd:24:bb:ef:04:db:5f:87:fa:75:
         f6:ed:10:ee:ae:89:6c:cf:87:28:3c:52:8f:0a:d1:5b:33:88:
         6a:40:c2:7c
-----BEGIN CERTIFICATE-----
MIIGzDCCBbSgAwIBAgIUAQ0Mn0MoWEDePTe2fqvvEA+LKsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRlMDNjNjEtNmUzOS00OWE1LWJiMjItNzdjYzViMGFi
MDZmMB4XDTIzMDIxMDIwMjQxMVoXDTI1MDUxNTE5MjQxMVowPTE7MDkGA1UEAxMy
ZmNiMjBmNTk2NjQxNTllOGEzMmI1ZmQ2N2FmOGEwNzQwOTE2YjA1NjIxODYyMGI4
ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQcwiYOnJ2jYM4meCR
A2eHVdWYM4KOuYHaXT7dppByk+Jh/+903c03X5ORCYcm5dJmtfFldC/z4l3J+Qse
XEEQOJVFcUN3l+YEogoxeup5pidRgivXxp1RxUQWVWongHz3HNS4DLnOEUFNreFS
vgmWCNKswidVQjT8pQ7S8M20esmyoTUIz7Zv1C68cjGLQTSmW+GwhpNjN1iwlTzv
uE/XFTnur9QHG2sRhc9I9FVwzu1YVf0zF5baitkmS3Fy/Lt3MGdp7PlviwnDA8+N
nbf85NBrRL59oCgSysb9JtIX9vQB7Ri8l3hndNEuNDXI/wnpu4G2KCQTChBtKzUl
uoMHAgMBAAGjggPQMIIDzDAdBgNVHQ4EFgQUpoF0cjJ0yNpIWRMSy8Np+7c5Cmsw
ggEiBggrBgEFBQcBCwSCARQwggEQMFMGCCsGAQUFBzAFhkdyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjA0NDZlNDAxODYzY2Y5
NDk1MzU3MjAvMDCBgAYIKwYBBQUHMAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5u
ZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2MDQ0NmU0MDE4NjNjZjk0OTUzNTcyMC8w
L0E2ODE3NDcyMzI3NEM4REE0ODU5MTMxMkNCQzM2OUZCQjczOTBBNkIubWZ0MDYG
CCsGAQUFBzANhipodHRwczovL3JyZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlv
bi54bWwwDwYDVR0TAQH/BAUwAwEB/zCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHF
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYy
LTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDRlMDNjNjEtNmUzOS00OWE1LWJiMjIt
NzdjYzViMGFiMDZmLzQ0ZTAzYzYxLTZlMzktNDlhNS1iYjIyLTc3Y2M1YjBhYjA2
Zi5jcmwwHwYDVR0jBBgwFoAU1nLkIIkfdiOZvgtTokk1BRkXVnEwDgYDVR0PAQH/
BAQDAgEGMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3luYzov
L3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEt
ZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1i
YTA1LTg3MTg3ZjAwOTliMi80NGUwM2M2MS02ZTM5LTQ5YTUtYmIyMi03N2NjNWIw
YWIwNmYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQClXCYMA4EAgAC
MAgDBgQmAvw7ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGGmIwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
dBpTiED0dloNgOdx/laQb6F5xdRp5OkqgSI9p9/EmoqdO5O9H3wxp6Zi3mCUFL+u
OwO3UvpCNA+pxseNais6v/RqmtTrKuinHNXpQMeP2qarscjD30twFoBVFIJxZWHa
9BgrOwYsoGiMrcoIkLyjNYwxQiaqBnQEg/5vCxCSpJXkExgD6/BSL7bhS6hGYHdD
JAI6Jp7ZMf39MGpFCzs3IAKcxyh3cPqJ2qgHipl+jdPJiOD9g+t4/oRm+amgEd5P
gILvrcwQOQQsQH0uDkUc6F6J0Bkwt6vcdTgYEV9lIzPNJLvvBNtfh/p19u0Q7q6J
bM+HKDxSjwrRWzOIakDCfA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:09 2023 by rpki-client on console-fra.rpki-client.org