Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8511f4e3-ff20-405d-91cb-9c3271104214/fcb20f59663b7257d0b0d32c3c2d1a6642140b574328b963c4.cer
File:                     fcb20f59663b7257d0b0d32c3c2d1a6642140b574328b963c4.cer (raw, json)
Hash identifier:          MLO/+rIie045E19cfXFB9RM+3Jy2MkGR8oav6tlxwQ0=
Subject key identifier:   5A:C3:89:48:64:6C:71:F2:6A:ED:AC:CA:B0:37:C3:2C:3E:90:95:D6
Authority key identifier: 49:58:01:AB:9D:4B:BB:4E:36:E6:A6:7E:40:D8:4F:D7:C8:1B:53:9C
Certificate issuer:       /CN=8511f4e3-ff20-405d-91cb-9c3271104214
Certificate serial:       010D0C9F432858430F80261FD5931308A3133DC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8511f4e3-ff20-405d-91cb-9c3271104214.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a485711347a61/0/5AC38948646C71F26AEDACCAB037C32C3E9095D6.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a485711347a61/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Wed 30 Aug 2023 21:27:32 +0000
Certificate not after:    Tue 02 Dec 2025 22:27:32 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0f:80:26:1f:d5:93:13:08:a3:13:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511f4e3-ff20-405d-91cb-9c3271104214
        Validity
            Not Before: Aug 30 21:27:32 2023 GMT
            Not After : Dec  2 22:27:32 2025 GMT
        Subject: CN=fcb20f59663b7257d0b0d32c3c2d1a6642140b574328b963c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9f:22:5a:ef:77:9b:c0:71:6f:93:cd:b8:e8:
                    ec:8c:f7:00:15:7f:d5:1b:c6:83:b5:60:06:87:27:
                    df:7c:78:7b:28:35:6e:3d:8d:99:07:b5:63:e4:43:
                    0c:4b:6d:38:64:3e:1f:92:a8:93:f7:be:d2:fe:53:
                    67:7d:30:24:33:44:19:f7:66:3c:71:3c:2a:8e:6a:
                    9a:1b:86:62:2c:b0:a3:e6:28:db:dd:db:a3:cd:4c:
                    ca:e3:90:9a:c0:31:7e:0c:45:38:ff:4b:a3:cc:e3:
                    16:5b:8e:4c:8e:06:23:80:f0:b7:36:91:0f:dd:b7:
                    d1:30:40:0a:c5:65:a7:62:59:65:f5:84:6d:a9:88:
                    6f:f4:22:f9:d5:14:3c:c3:8d:5a:64:41:9d:c0:67:
                    f8:90:9c:10:d5:e7:e5:4e:41:72:27:d1:9f:1d:29:
                    32:1a:93:14:a3:9e:13:ff:0f:97:96:74:c0:33:d4:
                    40:94:2d:46:b2:0b:1c:a3:b9:32:4a:80:e4:e2:c9:
                    2b:f0:7e:8b:58:e0:1a:bb:22:90:6e:e1:48:9b:6e:
                    30:5b:65:b1:33:96:0f:ed:60:8d:b4:57:01:d7:79:
                    2d:3b:76:8a:2d:4e:7f:da:78:e9:66:40:49:dc:7c:
                    1a:eb:ca:0a:af:fc:da:a0:85:5f:4d:99:64:ab:1e:
                    74:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C3:89:48:64:6C:71:F2:6A:ED:AC:CA:B0:37:C3:2C:3E:90:95:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a485711347a61/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018a485711347a61/0/5AC38948646C71F26AEDACCAB037C32C3E9095D6.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8511f4e3-ff20-405d-91cb-9c3271104214/8511f4e3-ff20-405d-91cb-9c3271104214.crl

            X509v3 Authority Key Identifier:
                keyid:49:58:01:AB:9D:4B:BB:4E:36:E6:A6:7E:40:D8:4F:D7:C8:1B:53:9C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8511f4e3-ff20-405d-91cb-9c3271104214.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:59:9d:91:b8:ff:1d:cf:84:72:47:c8:0c:10:94:09:ef:32:
         4f:db:7e:94:0f:f5:7b:39:4a:26:32:f1:4a:95:8d:ac:9b:9f:
         6a:74:e2:e5:9a:e3:1d:ee:63:19:d7:b4:a9:c5:f8:9a:0f:ac:
         99:07:a6:dd:3a:97:83:a3:cc:2e:a6:9d:13:13:d5:a7:01:84:
         9d:9e:cf:ac:f5:9e:24:29:a7:e0:71:42:26:a7:2b:98:ff:28:
         a7:3e:7e:f0:93:db:80:f2:84:c6:82:cf:67:56:96:c6:3b:52:
         77:7a:63:51:fc:45:b1:23:3d:6c:e1:b8:18:c7:9e:b9:f1:04:
         22:38:a9:df:42:34:e4:7a:e2:a2:0c:b5:93:01:45:f7:2a:ee:
         36:d7:28:b4:28:8d:1d:37:dd:68:bf:58:37:2c:3d:95:c8:68:
         60:6d:e2:13:c7:bc:6b:dc:98:9f:ef:c3:78:43:5f:e3:4f:7d:
         2b:39:20:31:1c:11:88:d7:95:a0:5a:82:10:9d:89:84:06:7b:
         a2:46:75:9f:7f:8a:b6:af:87:10:c3:7f:f7:91:5b:92:aa:ca:
         7c:ef:d5:70:70:0a:7e:4d:a2:b0:b4:d8:d1:44:87:39:a7:f5:
         f0:ef:a4:bf:a6:9a:8a:62:5d:4f:23:52:ac:4b:4c:68:45:c5:
         a5:ee:7b:db
-----BEGIN CERTIFICATE-----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Generated at Thu Aug 31 19:21:00 2023 by rpki-client on console-fra.rpki-client.org