Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6aa6596e-9a05-491e-8e81-f4981ff0ad67/fcb20f596693155a1864e44c50c981e9f5040b84ac230f78e6.cer
File:                     fcb20f596693155a1864e44c50c981e9f5040b84ac230f78e6.cer (raw, json)
Hash identifier:          8US1FpeqROOjOxHJB6mtG8gsLnpGrFDB/4hc+tkxnDE=
Subject key identifier:   C7:6F:54:7E:C5:CB:0A:C6:22:F2:80:D5:60:91:2B:99:71:D1:75:09
Authority key identifier: AD:AB:48:16:FA:7A:32:4F:31:36:F8:59:01:01:90:43:57:4B:B5:7B
Certificate issuer:       /CN=6aa6596e-9a05-491e-8e81-f4981ff0ad67
Certificate serial:       010D0C9F43285842E4FC69A9A64D43A19A5E4200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6aa6596e-9a05-491e-8e81-f4981ff0ad67.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b0189f9ea33681b39/0/C76F547EC5CB0AC622F280D560912B9971D17509.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b0189f9ea33681b39/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 15 Aug 2023 15:58:09 +0000
Certificate not after:    Mon 17 Nov 2025 16:58:09 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e4:fc:69:a9:a6:4d:43:a1:9a:5e:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa6596e-9a05-491e-8e81-f4981ff0ad67
        Validity
            Not Before: Aug 15 15:58:09 2023 GMT
            Not After : Nov 17 16:58:09 2025 GMT
        Subject: CN=fcb20f596693155a1864e44c50c981e9f5040b84ac230f78e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f5:a2:cf:89:d4:90:fd:9a:24:7c:a8:21:4e:
                    a5:4e:f6:24:73:8e:6c:15:88:ad:b4:b0:34:08:60:
                    69:af:df:0f:3f:0f:ef:f5:5c:54:87:c0:39:11:3b:
                    a9:de:41:c3:b9:e3:f3:24:c4:b2:8d:ed:f0:9b:c2:
                    a4:b3:fc:c9:4a:0f:96:12:04:d4:b3:17:49:38:49:
                    53:b7:6c:15:65:2d:cb:8b:35:82:37:b0:49:7d:6e:
                    5e:11:b5:bb:eb:ea:c5:d0:d5:0e:a8:64:b7:da:66:
                    8f:3b:80:87:73:95:6b:fa:25:45:a3:ad:8a:e1:3f:
                    1a:3b:a5:c0:4f:07:6e:ee:3a:08:b2:5c:5b:45:75:
                    71:ab:07:95:61:9a:24:aa:04:cf:5c:21:a6:19:b1:
                    91:2b:11:3a:d9:23:10:7b:fd:cf:15:36:42:15:3b:
                    c5:20:d0:b2:82:5b:84:ad:2a:09:7b:d8:fa:2c:34:
                    1c:83:91:52:a2:9d:8b:a8:00:b3:c4:62:00:3f:34:
                    a5:c2:a0:7c:4b:7c:b0:74:23:4c:d8:a6:69:e1:88:
                    ba:bf:38:ea:e5:bf:3b:2a:2f:58:a0:f7:3c:1b:73:
                    83:a0:a8:ea:5a:9c:f1:4d:6e:69:c8:6e:e2:16:70:
                    8b:0e:46:e2:a0:52:ae:47:ac:7a:20:70:1c:a6:30:
                    36:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6F:54:7E:C5:CB:0A:C6:22:F2:80:D5:60:91:2B:99:71:D1:75:09
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b0189f9ea33681b39/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b0189f9ea33681b39/0/C76F547EC5CB0AC622F280D560912B9971D17509.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6aa6596e-9a05-491e-8e81-f4981ff0ad67/6aa6596e-9a05-491e-8e81-f4981ff0ad67.crl

            X509v3 Authority Key Identifier:
                keyid:AD:AB:48:16:FA:7A:32:4F:31:36:F8:59:01:01:90:43:57:4B:B5:7B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6aa6596e-9a05-491e-8e81-f4981ff0ad67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1d:63:89:61:23:90:00:88:91:5a:d9:b8:16:3f:ed:60:f9:
         c2:3a:8e:64:64:90:94:3b:26:18:3e:30:75:a4:ae:07:5c:7f:
         fa:08:a2:3d:50:68:44:c0:85:d2:f1:78:7d:5c:11:11:e6:da:
         65:8e:38:e4:83:9e:25:0b:e7:7e:e1:9f:6f:34:3a:72:80:32:
         de:c8:34:1b:d2:2d:9d:96:d2:83:6a:59:0d:b6:93:6c:e9:cc:
         34:c6:30:31:66:d9:46:05:2d:f7:4a:31:81:d4:f5:8f:8b:57:
         62:a8:4a:ca:12:03:5b:6a:71:f2:61:d6:61:67:40:ba:d4:bb:
         f0:27:b7:2c:e5:1e:61:f3:98:c3:6b:fb:f6:a7:27:d5:f5:ee:
         e7:59:c9:32:ff:69:a1:68:bc:90:75:8a:4c:80:db:32:5f:b1:
         d9:77:24:b8:a8:1a:3c:37:ac:29:b4:e5:b9:00:3f:16:f2:ab:
         f3:9e:5e:39:32:d6:68:5c:bf:a6:5f:6f:97:4b:cd:31:f0:cd:
         32:a5:85:88:77:1a:17:d6:66:5c:00:2e:13:67:f7:2b:8e:1c:
         61:d4:8e:a9:8c:46:ef:8b:4c:00:d4:d6:ae:e1:46:c6:90:6f:
         1f:dc:e9:f4:23:e0:fc:db:cb:09:b7:5e:fe:4f:45:a1:84:34:
         15:14:36:31
-----BEGIN CERTIFICATE-----
MIIG1jCCBb6gAwIBAgIUAQ0Mn0MoWELk/Gmppk1DoZpeQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmFhNjU5NmUtOWEwNS00OTFlLThlODEtZjQ5ODFmZjBh
ZDY3MB4XDTIzMDgxNTE1NTgwOVoXDTI1MTExNzE2NTgwOVowPTE7MDkGA1UEAxMy
ZmNiMjBmNTk2NjkzMTU1YTE4NjRlNDRjNTBjOTgxZTlmNTA0MGI4NGFjMjMwZjc4
ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi9aLPidSQ/ZokfKgh
TqVO9iRzjmwViK20sDQIYGmv3w8/D+/1XFSHwDkRO6neQcO54/MkxLKN7fCbwqSz
/MlKD5YSBNSzF0k4SVO3bBVlLcuLNYI3sEl9bl4Rtbvr6sXQ1Q6oZLfaZo87gIdz
lWv6JUWjrYrhPxo7pcBPB27uOgiyXFtFdXGrB5VhmiSqBM9cIaYZsZErETrZIxB7
/c8VNkIVO8Ug0LKCW4StKgl72PosNByDkVKinYuoALPEYgA/NKXCoHxLfLB0I0zY
pmnhiLq/OOrlvzsqL1ig9zwbc4OgqOpanPFNbmnIbuIWcIsORuKgUq5HrHogcBym
MDZtAgMBAAGjggPaMIID1jAdBgNVHQ4EFgQUx29UfsXLCsYi8oDVYJErmXHRdQkw
ggEiBggrBgEFBQcBCwSCARQwggEQMFMGCCsGAQUFBzAFhkdyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4OWUwMmU4YjAxODlmOWVh
MzM2ODFiMzkvMDCBgAYIKwYBBQUHMAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5u
ZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg5ZTAyZThiMDE4OWY5ZWEzMzY4MWIzOS8w
L0M3NkY1NDdFQzVDQjBBQzYyMkYyODBENTYwOTEyQjk5NzFEMTc1MDkubWZ0MDYG
CCsGAQUFBzANhipodHRwczovL3JyZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlv
bi54bWwwDwYDVR0TAQH/BAUwAwEB/zCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHF
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1kZmRm
LTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNmFhNjU5NmUtOWEwNS00OTFlLThlODEt
ZjQ5ODFmZjBhZDY3LzZhYTY1OTZlLTlhMDUtNDkxZS04ZTgxLWY0OTgxZmYwYWQ2
Ny5jcmwwHwYDVR0jBBgwFoAUratIFvp6Mk8xNvhZAQGQQ1dLtXswDgYDVR0PAQH/
BAQDAgEGMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3luYzov
L3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEt
ZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1i
OTBkLTNiYzdhNWZlYjgyYi82YWE2NTk2ZS05YTA1LTQ5MWUtOGU4MS1mNDk4MWZm
MGFkNjcuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQClXCYAwQAzcRi
MA4EAgACMAgDBgQmAvw7ADAeBggrBgEFBQcBCAEB/wQPMA2gCzAJAgJm5AIDBhpi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACwdY4lhI5AAiJFa2bgWP+1g+cI6jmRkkJQ7Jhg+MHWkrgdcf/oI
oj1QaETAhdLxeH1cERHm2mWOOOSDniUL537hn280OnKAMt7INBvSLZ2W0oNqWQ22
k2zpzDTGMDFm2UYFLfdKMYHU9Y+LV2KoSsoSA1tqcfJh1mFnQLrUu/AntyzlHmHz
mMNr+/anJ9X17udZyTL/aaFovJB1ikyA2zJfsdl3JLioGjw3rCm05bkAPxbyq/Oe
Xjky1mhcv6Zfb5dLzTHwzTKlhYh3GhfWZlwALhNn9yuOHGHUjqmMRu+LTADU1q7h
RsaQbx/c6fQj4Pzbywm3Xv5PRaGENBUUNjE=
-----END CERTIFICATE-----
Generated at Wed Aug 16 13:34:27 2023 by rpki-client on console-fra.rpki-client.org