Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/10c053f6-32c1-4f13-9d6f-b59eb1034d38/fcb20f59661298c508c4ca5a7b03894bbefb3288c3fc7e6b05.cer
File:                     fcb20f59661298c508c4ca5a7b03894bbefb3288c3fc7e6b05.cer (raw, json)
Hash identifier:          LXkJ0sFiw++x2eKibJ/3gT+pVXb+kWtOEPH3HLAYlKE=
Subject key identifier:   73:E4:86:B5:02:11:18:B5:D5:E7:15:60:D8:E4:24:29:A9:6F:54:4C
Authority key identifier: 49:25:09:04:CB:9E:30:3E:CF:70:E3:EB:CE:33:A1:51:0A:D4:D5:DC
Certificate issuer:       /CN=10c053f6-32c1-4f13-9d6f-b59eb1034d38
Certificate serial:       010D0C9F43285842836893A83EF12700B65F1BF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/10c053f6-32c1-4f13-9d6f-b59eb1034d38.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018945eb25534e73/0/73E486B5021118B5D5E71560D8E42429A96F544C.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018945eb25534e73/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 11 Jul 2023 17:06:52 +0000
Certificate not after:    Mon 13 Oct 2025 17:06:52 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:83:68:93:a8:3e:f1:27:00:b6:5f:1b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c053f6-32c1-4f13-9d6f-b59eb1034d38
        Validity
            Not Before: Jul 11 17:06:52 2023 GMT
            Not After : Oct 13 17:06:52 2025 GMT
        Subject: CN=fcb20f59661298c508c4ca5a7b03894bbefb3288c3fc7e6b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:92:35:be:8c:09:c5:27:5a:82:3d:32:8f:
                    2b:34:40:e5:d1:9d:56:70:ac:2c:ac:ff:44:91:d8:
                    78:1a:33:59:cb:bf:01:5d:04:89:47:2f:9e:81:cb:
                    dc:7e:56:74:53:f8:9b:a4:c9:65:12:80:54:7c:cb:
                    f7:1c:40:c2:26:8a:dc:ef:f6:07:23:ff:50:08:0d:
                    31:8d:8d:97:46:97:a0:79:1a:7f:c8:45:cb:1b:83:
                    cd:6b:fc:a7:f9:f2:d8:4e:b9:b7:f0:7c:41:fb:87:
                    b8:81:d1:6c:62:4b:78:17:5a:8b:f3:b4:57:9d:4d:
                    06:34:3c:34:9b:3b:30:9c:00:30:54:bb:10:93:61:
                    69:7e:eb:29:0e:3d:f3:ed:81:77:6a:69:47:46:12:
                    40:c2:25:ad:22:51:2d:8e:7d:1d:a5:27:42:c6:b8:
                    fc:57:00:8a:37:b9:8f:a2:e2:5d:68:63:d1:6e:c6:
                    db:78:14:6a:66:c4:e1:71:53:03:2c:7e:98:b3:59:
                    ae:6e:b5:53:65:45:15:ed:8c:e8:d7:82:49:3f:a3:
                    12:37:3b:7b:14:c9:51:8a:81:88:52:93:e6:a0:03:
                    46:d6:1d:c6:9b:08:71:d7:0e:d1:e8:36:c0:3a:96:
                    54:1c:d9:99:7d:28:4c:c4:2c:80:7d:6b:ce:c6:15:
                    5f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E4:86:B5:02:11:18:B5:D5:E7:15:60:D8:E4:24:29:A9:6F:54:4C
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018945eb25534e73/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018945eb25534e73/0/73E486B5021118B5D5E71560D8E42429A96F544C.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/10c053f6-32c1-4f13-9d6f-b59eb1034d38/10c053f6-32c1-4f13-9d6f-b59eb1034d38.crl

            X509v3 Authority Key Identifier:
                keyid:49:25:09:04:CB:9E:30:3E:CF:70:E3:EB:CE:33:A1:51:0A:D4:D5:DC

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/10c053f6-32c1-4f13-9d6f-b59eb1034d38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e8:c3:20:01:0b:29:26:4f:90:91:59:ec:af:df:06:9b:cb:
         00:ac:34:ca:6a:8c:7b:2b:b9:31:24:be:18:8f:3c:54:e7:2e:
         d1:ce:9d:8e:02:f0:3e:a4:11:de:cf:94:e0:62:a8:c1:36:a0:
         74:45:d9:5a:1f:03:d4:9a:48:3c:f4:5b:34:96:03:82:65:37:
         65:f7:e9:b2:51:ed:dc:d2:6a:5d:c9:10:e0:1d:aa:de:21:18:
         5a:11:ea:90:36:f1:a4:a8:d7:e9:04:90:f8:b1:df:6e:08:db:
         b8:a8:74:83:9b:3e:93:2d:c5:35:81:9b:00:d0:84:b7:b0:42:
         d6:d6:bc:0f:6a:a5:14:ef:5e:68:5b:8a:51:c2:d5:19:87:92:
         40:4e:cd:53:aa:a8:70:1a:39:55:bc:d9:ae:37:42:17:3c:36:
         22:7e:51:1a:d1:97:f9:df:ef:bf:cf:bc:c9:08:11:17:d5:40:
         ff:82:29:ae:c7:41:65:4e:36:50:ac:80:85:35:f3:8e:c1:96:
         23:11:97:35:52:74:11:14:83:6b:a2:24:51:48:c0:46:5e:c7:
         48:18:67:73:a9:ba:3d:23:8a:12:0f:48:59:1f:6b:b8:c8:27:
         59:36:43:b6:42:9c:0d:db:4d:eb:7a:e7:23:ea:8c:a6:65:50:
         4f:40:2f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:46 2023 by rpki-client on console-ams.rpki-client.org