Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341.cer
File:                     10e81901-486f-483f-806f-344bd4fe0341.cer (raw, json)
Hash identifier:          uPyeZVWNJp5KMvDgpka4lNrVHl4VZeuiDXQqBoTZ2vY=
Subject key identifier:   5F:95:1B:50:BE:51:5C:E6:54:C6:F3:D1:B8:87:A2:9D:73:41:8F:87
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285847FB12B72193ED8C82BF1C81C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/10e81901-486f-483f-806f-344bd4fe0341.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 24 Nov 2024 01:45:33 +0000
Certificate not after:    Sat 27 Feb 2027 01:45:33 +0000
Subordinate resources:    AS: 33000
                          IP: 23.147.248.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fb:12:b7:21:93:ed:8c:82:bf:1c:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Nov 24 01:45:33 2024 GMT
            Not After : Feb 27 01:45:33 2027 GMT
        Subject: CN=10e81901-486f-483f-806f-344bd4fe0341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b9:18:95:02:04:a1:0b:fd:d5:71:06:56:d9:
                    80:77:d9:cb:f6:3b:11:8c:6c:f0:11:18:99:ac:e7:
                    9a:40:dd:94:6c:d8:83:d3:31:19:b5:c0:d1:5f:6b:
                    de:6a:49:9f:61:78:82:e4:bc:fc:7e:f8:f4:13:ff:
                    63:0d:9f:b5:92:03:bf:5c:e0:d0:a8:ef:ff:a4:ca:
                    2f:73:a7:f4:a0:0a:4b:fa:83:f6:e1:99:b8:f9:d9:
                    74:79:dc:4d:9f:62:4d:94:8c:9a:b8:c7:b6:a5:e8:
                    cb:3c:29:56:a0:71:71:cd:76:fc:c0:43:ad:94:f7:
                    fb:9d:8b:e6:11:fa:ea:fe:fe:ac:ab:f8:e7:96:f5:
                    ef:0a:10:15:03:6b:66:6c:d2:4e:f3:2e:9b:2b:15:
                    e2:0d:91:0c:26:a4:42:c5:33:5e:1b:78:ee:91:1f:
                    53:59:b9:e2:94:2e:44:1a:17:2c:be:72:82:7d:72:
                    1a:d0:11:75:44:4e:1f:97:69:79:d9:80:8d:9d:b9:
                    a3:38:e0:e6:f4:9f:7f:e1:45:01:3f:79:de:9a:2f:
                    b5:20:bb:a2:2b:a4:91:42:02:e8:25:9b:a0:da:2c:
                    cf:03:f3:dc:7c:63:7c:3c:70:4a:30:56:45:19:27:
                    9b:52:26:50:a0:f5:b5:3d:86:8c:76:52:c9:cf:6f:
                    00:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:95:1B:50:BE:51:5C:E6:54:C6:F3:D1:B8:87:A2:9D:73:41:8F:87
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/10e81901-486f-483f-806f-344bd4fe0341.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.248.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33000

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:25:5d:b9:e5:2a:bb:f0:98:0d:f9:a9:79:6e:1e:bf:5b:ac:
         02:b0:95:44:2b:77:ef:53:2c:22:75:88:85:4e:e9:dc:fe:fb:
         88:7d:bc:74:ad:1f:07:fb:28:fe:55:08:96:3a:d1:24:2e:8f:
         ae:3e:c6:66:97:af:66:f0:cb:77:04:55:4d:a2:fa:85:90:44:
         e9:bd:fd:7e:5a:13:28:87:2c:ac:f5:0c:3c:8d:a2:33:45:7a:
         6a:18:e4:17:59:c9:6a:f2:d6:fd:cd:2b:69:05:1f:4e:b4:85:
         b9:a1:32:cf:a5:55:a1:93:de:f2:08:42:03:db:a9:da:87:ae:
         c0:a1:98:0f:26:d0:e3:7a:fc:e5:1d:d6:fc:66:98:24:1a:36:
         d0:d1:48:75:11:d6:cb:8d:04:8a:06:ec:24:01:8b:d0:bc:a3:
         ff:9f:e1:38:4b:a2:6a:ef:b9:ac:05:37:ed:36:62:a8:e7:b7:
         d1:46:3a:c3:52:38:ac:29:63:db:a3:c1:6a:d8:ce:1a:71:79:
         37:45:9c:db:5c:6f:e8:24:39:a3:6c:fd:8a:83:c5:4c:43:35:
         c1:ec:79:c0:8c:a8:cd:8a:89:37:f2:54:be:f5:2b:d0:3a:58:
         79:6b:15:f5:62:64:2a:5e:49:f9:e7:3d:ca:07:d4:b8:65:67:
         76:3f:c3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 01:23:58 2025 by rpki-client