Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0ec4ce3f-2e6b-4972-b293-553db240f905/62e8972cb6199bf6289052b2adc6d99909c39fd992ff5137f4.cer
File:                     62e8972cb6199bf6289052b2adc6d99909c39fd992ff5137f4.cer (raw, json)
Hash identifier:          hopMSwru09HYo6964ruInZ/Vn9BLDL44gLBUwPOoKog=
Subject key identifier:   8A:C4:9D:E5:90:6A:14:A9:2D:8A:A5:A1:3F:74:94:00:11:C6:45:BC
Authority key identifier: C3:10:D7:47:6F:18:64:F2:BC:70:4F:2F:C8:A3:97:7A:16:6D:E9:64
Certificate issuer:       /CN=0ec4ce3f-2e6b-4972-b293-553db240f905
Certificate serial:       010D0C9F43285846BEF36114F49721A6D1E7FFC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0ec4ce3f-2e6b-4972-b293-553db240f905.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/0/8AC49DE5906A14A92D8AA5A13F74940011C645BC.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Fri 02 Aug 2024 20:06:59 +0000
Certificate not after:    Thu 05 Nov 2026 21:06:59 +0000
Subordinate resources:    IP: 2620:10f:f000::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:be:f3:61:14:f4:97:21:a6:d1:e7:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ec4ce3f-2e6b-4972-b293-553db240f905
        Validity
            Not Before: Aug  2 20:06:59 2024 GMT
            Not After : Nov  5 21:06:59 2026 GMT
        Subject: CN=62e8972cb6199bf6289052b2adc6d99909c39fd992ff5137f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4c:3d:c6:f4:6d:2a:b6:b4:12:ad:fc:32:56:
                    c4:55:ce:af:aa:2e:cd:9a:a8:5e:00:fb:94:7d:0f:
                    0a:b8:26:23:54:73:8e:f2:6b:e9:74:d7:fd:22:3a:
                    a6:94:7f:7a:c4:88:c2:14:2f:03:58:db:26:ae:5c:
                    54:89:7b:d7:36:54:52:e4:f0:8f:64:f8:45:1b:e0:
                    fb:38:45:c9:14:02:7b:ae:e2:16:52:96:20:87:6a:
                    f3:01:73:4c:62:10:9e:10:27:df:44:84:64:ae:f5:
                    b2:4c:c8:48:4a:db:e3:7f:3e:b5:db:47:eb:ee:b1:
                    9d:b6:cf:93:50:2d:b4:67:b2:75:52:a5:98:a2:65:
                    79:64:b8:f4:83:77:e1:71:5b:20:b3:64:f2:4f:de:
                    8c:4c:32:d2:7c:1f:89:14:99:78:45:53:75:f4:bf:
                    6a:1a:36:b8:b3:b9:18:70:83:52:a0:e2:e6:8d:5e:
                    79:7e:20:08:f0:4a:27:73:86:90:66:41:f4:b3:e8:
                    f6:b9:20:ba:7e:1b:ec:56:a2:8f:e6:40:70:08:02:
                    cf:3b:6b:b6:ec:71:91:cf:ac:4e:1d:2d:00:a6:a8:
                    fc:bf:ae:9a:eb:7e:9e:63:aa:de:98:ba:a1:8b:40:
                    f7:6d:ba:5b:6e:e5:0e:b1:44:d6:69:4b:04:24:58:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C4:9D:E5:90:6A:14:A9:2D:8A:A5:A1:3F:74:94:00:11:C6:45:BC
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade90c647ac019114b3bad756f1/0/8AC49DE5906A14A92D8AA5A13F74940011C645BC.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0ec4ce3f-2e6b-4972-b293-553db240f905/0ec4ce3f-2e6b-4972-b293-553db240f905.crl

            X509v3 Authority Key Identifier:
                keyid:C3:10:D7:47:6F:18:64:F2:BC:70:4F:2F:C8:A3:97:7A:16:6D:E9:64

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0ec4ce3f-2e6b-4972-b293-553db240f905.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:0f:b9:56:7c:f8:cb:ed:3b:56:60:08:67:5b:fb:58:87:86:
         7e:04:c2:43:5a:90:e7:6c:58:78:ab:02:7b:f8:7e:a0:2c:a6:
         c4:ed:18:3a:fb:bf:af:3f:6d:2c:de:86:6c:0b:bc:3e:6a:ef:
         d8:f9:06:23:28:5f:05:2d:fa:af:dc:0d:68:35:2a:3b:15:41:
         61:be:e9:37:73:66:63:76:d5:88:4c:ce:29:8c:ef:e9:34:7a:
         4b:b2:2d:e0:07:8f:4b:14:c0:7c:b4:93:37:6e:41:2b:96:ac:
         52:2f:a6:d9:38:46:5f:e3:48:1a:a9:bb:e1:1c:78:fe:df:83:
         f6:06:bf:b9:1a:b1:54:8d:b1:04:99:06:5b:c0:d4:bd:96:e2:
         26:e2:60:12:b7:0f:e7:27:47:82:84:f2:7d:11:fe:66:72:dc:
         90:6f:b7:bb:5f:72:e1:2e:d3:2e:d6:64:3d:e4:e7:ad:bc:10:
         59:3f:14:6a:4c:2a:27:ad:ae:74:39:b2:12:73:90:a8:6e:81:
         5c:18:2b:66:a7:1a:31:fb:ec:b4:9c:ea:bd:cc:0c:bf:74:85:
         3b:dd:92:fc:4a:ff:ec:18:a5:9d:2a:f3:fd:e1:27:03:2a:cd:
         c0:5e:92:18:c3:3e:83:9b:9a:8f:51:db:4a:d8:b6:52:0c:40:
         ec:96:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 22:29:00 2024 by rpki-client on console-fra.rpki-client.org