Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd.cer
File:                     fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd.cer (raw, json)
Hash identifier:          c3qHIGz1hYL8GXI0eHGat6PcEdm4AcXEbVcik6RvAGQ=
Subject key identifier:   DA:31:D6:43:46:D9:E7:5E:2A:5A:B4:2D:4E:1A:39:16:9A:87:0F:35
Authority key identifier: 68:C6:18:E3:82:A9:29:6A:B0:D2:CA:6B:6E:67:46:79:39:BE:F1:B2
Certificate issuer:       /CN=9757a31a-d9fe-4e04-975c-0effa5590b88
Certificate serial:       010D0C9F43285840C1F1025B940CE84040725C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/DA31D64346D9E75E2A5AB42D4E1A39169A870F35.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 31 Jan 2023 17:08:00 +0000
Certificate not after:    Mon 05 May 2025 16:08:00 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:c1:f1:02:5b:94:0c:e8:40:40:72:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9757a31a-d9fe-4e04-975c-0effa5590b88
        Validity
            Not Before: Jan 31 17:08:00 2023 GMT
            Not After : May  5 16:08:00 2025 GMT
        Subject: CN=fcb20f59662e1f165108b0f0a565cc8cac53a599c1019410bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f7:72:3e:59:ae:d0:54:b2:e8:4b:35:2e:12:
                    f2:95:47:92:e8:5e:24:11:a1:93:41:17:05:d5:83:
                    ea:4d:1e:45:09:3c:85:3f:1e:20:db:bb:fa:8c:4f:
                    c9:a6:f7:ff:54:ce:e0:5f:d1:f1:0b:0a:4a:09:2c:
                    ab:f9:33:3c:a0:2e:00:a5:74:c8:61:31:8e:6f:49:
                    52:f6:41:d9:31:c8:c9:cb:b4:af:0f:74:d6:ff:25:
                    e2:b2:a8:1d:32:35:87:36:44:ba:5e:79:58:66:c0:
                    0b:9f:02:8a:4a:5a:79:0b:50:12:2d:9a:4a:7f:7f:
                    04:f5:d4:a1:c5:97:52:16:66:be:89:39:e1:bf:ec:
                    79:59:3e:b6:a4:6e:c7:d9:a8:8c:31:86:bd:1d:8f:
                    60:9f:01:f6:6b:ff:00:b7:dd:e5:fa:27:c5:27:f7:
                    fe:e8:ed:f2:07:d5:40:1c:c1:71:c5:e0:59:b3:91:
                    01:ae:37:e3:f4:81:ee:26:b4:03:c5:a4:f8:0a:c2:
                    af:13:96:e8:b1:a2:ea:81:7f:12:7d:70:43:b9:bd:
                    89:72:4d:f1:4c:8f:7c:8b:9b:09:f0:9c:73:56:e2:
                    e6:67:c8:ad:c6:92:50:6f:57:4c:11:d4:d2:bf:3b:
                    62:d8:c4:db:8d:01:9d:9e:cc:3e:67:10:5c:02:d6:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:31:D6:43:46:D9:E7:5E:2A:5A:B4:2D:4E:1A:39:16:9A:87:0F:35
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf86044e48018608cb937b05ea/0/DA31D64346D9E75E2A5AB42D4E1A39169A870F35.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88/9757a31a-d9fe-4e04-975c-0effa5590b88.crl

            X509v3 Authority Key Identifier:
                keyid:68:C6:18:E3:82:A9:29:6A:B0:D2:CA:6B:6E:67:46:79:39:BE:F1:B2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9757a31a-d9fe-4e04-975c-0effa5590b88.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:42:4f:7f:3f:46:b1:66:6b:f3:cf:bb:1e:9d:2f:e3:30:77:
         79:36:f6:0d:7a:92:4e:15:d6:eb:8a:aa:41:a8:37:d0:2b:65:
         fd:e5:38:7e:fc:29:0f:71:8c:eb:a0:9b:51:68:01:de:9a:5e:
         39:e1:9d:61:bd:24:3a:23:26:9f:09:38:c0:f7:97:96:c3:39:
         cf:86:99:57:e0:7f:01:ab:0d:13:71:42:c6:f3:4e:0a:d9:8c:
         a8:ae:a6:32:31:8c:d0:a0:32:eb:00:a2:86:f1:1c:50:13:4f:
         00:38:a1:87:d4:ea:22:ca:aa:6e:5a:be:67:9d:1d:d6:2d:96:
         84:4a:93:95:fb:56:4f:04:77:d6:c4:68:3c:04:35:b6:ea:ae:
         1e:49:36:db:7c:c2:db:37:c8:cd:cf:a8:c4:24:3a:17:da:ae:
         4d:77:0b:9b:5c:c2:40:a3:65:97:05:fa:ab:16:8d:c9:8c:e0:
         be:24:af:3b:7a:43:12:ca:3e:29:6d:ef:5a:72:47:75:f2:07:
         4e:1c:76:01:de:28:77:43:1e:2b:83:0b:a7:21:de:de:c5:6f:
         9d:3c:22:c0:ba:05:76:69:79:33:c0:65:b7:ef:a3:d2:e3:c0:
         26:83:96:5e:21:98:f3:5c:3f:f7:3b:6c:0d:0d:f0:4d:5f:ec:
         18:7d:bb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:28 2023 by rpki-client on console-fra.rpki-client.org