Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer
File:                     fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer (raw, json)
Hash identifier:          f7qB8kX+BoQ+TZ6KTqxi+gIsw9TAi8yO7wq5kMKtSQk=
Subject key identifier:   EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2
Authority key identifier: B7:BB:6D:A3:C4:AB:48:1F:C4:99:87:42:DC:47:9B:55:AB:D4:63:85
Certificate issuer:       /CN=12dc7a96-47ea-453b-a3ad-351c682409d9
Certificate serial:       010D0C9F4328583C94EB0192228B6150025F0680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/EEBEEE18830CF3819A7890C8155FB97921DF45E2.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Thu 13 Jan 2022 18:56:47 +0000
Certificate not after:    Tue 13 Jan 2032 18:56:47 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:94:eb:01:92:22:8b:61:50:02:5f:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12dc7a96-47ea-453b-a3ad-351c682409d9
        Validity
            Not Before: Jan 13 18:56:47 2022 GMT
            Not After : Jan 13 18:56:47 2032 GMT
        Subject: CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:30:a9:2c:31:3c:d7:b5:86:3a:4a:98:5c:
                    91:ca:cb:b0:3b:3b:35:33:e2:8f:f3:17:b2:0b:8f:
                    bc:96:42:7b:cf:ac:d7:08:34:c0:94:07:8d:54:18:
                    8b:b6:2a:d1:86:dd:05:6d:aa:67:47:46:e7:73:26:
                    d1:12:7c:51:e8:a8:69:aa:62:7a:8b:b6:a4:af:d1:
                    01:0e:c0:f8:9c:a4:87:9f:58:6a:d1:3e:17:b3:43:
                    c8:6d:ef:6e:86:ed:e5:64:0d:2f:ff:58:43:cc:d9:
                    72:b3:9b:9b:79:26:de:0f:4d:b7:7e:c5:ee:e7:66:
                    6f:50:73:7e:90:a9:4b:6b:df:14:1a:be:66:88:90:
                    65:bf:3b:b2:36:fa:0b:f7:af:be:25:59:f8:0e:60:
                    c3:29:40:91:db:76:25:a2:8c:11:26:4e:ee:fe:a1:
                    63:f9:5e:b0:3e:78:c4:63:aa:1b:ba:00:4b:4e:1e:
                    2d:ce:ec:1c:23:f5:9c:7c:21:42:3e:2a:33:24:5f:
                    18:41:23:17:de:f4:c4:c9:95:62:60:5e:1f:52:dd:
                    75:d2:87:aa:56:46:20:41:01:5b:63:e9:d7:1d:66:
                    de:73:58:f5:97:74:51:e6:60:2a:88:2e:88:8f:d8:
                    a4:e6:b0:93:aa:ce:df:bc:03:18:7d:6b:b4:0b:43:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/EEBEEE18830CF3819A7890C8155FB97921DF45E2.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/12dc7a96-47ea-453b-a3ad-351c682409d9.crl

            X509v3 Authority Key Identifier:
                keyid:B7:BB:6D:A3:C4:AB:48:1F:C4:99:87:42:DC:47:9B:55:AB:D4:63:85

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:2a:8e:e0:d2:d5:11:f5:87:ad:f4:91:d8:46:0a:27:9d:67:
         d2:42:08:3b:c3:7a:d7:8b:19:86:d4:d4:d6:db:78:78:83:32:
         79:e2:41:8e:ed:19:9b:94:b3:fd:df:94:40:8b:ae:68:66:34:
         5d:58:38:d6:8b:95:5c:05:d0:4d:64:97:7a:87:3e:23:8b:9a:
         16:b2:34:ef:23:7d:cb:54:94:f0:dd:df:97:92:67:37:4c:fd:
         3d:6e:c8:0b:a8:4a:e4:e6:07:2b:ae:a8:d6:9b:57:9b:eb:17:
         82:13:5e:d1:c3:75:45:c2:0e:3f:d5:15:75:a6:c6:33:5a:ff:
         ce:50:17:69:7a:97:81:af:a6:ef:a8:fe:26:78:a5:9c:b4:eb:
         bc:9e:42:d9:da:f0:eb:25:16:e7:36:ff:22:94:44:ea:b2:9b:
         84:21:fb:3e:d6:31:69:4e:27:f7:cf:27:de:fe:ca:88:a3:10:
         db:28:ad:fd:b4:6f:38:90:b5:e9:17:aa:37:9f:70:82:11:3a:
         a8:0d:67:e3:e1:04:aa:4a:57:c4:ba:d9:c6:71:01:02:ee:1a:
         aa:f8:9a:2a:f6:9b:0b:92:5d:04:39:12:d7:12:12:04:73:a2:
         46:63:e3:56:e5:7c:6b:08:6c:42:40:33:ed:bd:06:6f:97:5b:
         7a:fb:1a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:30 2023 by rpki-client on console-ams.rpki-client.org