Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer
File:                     fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4.cer (raw, json)
Hash identifier:          hlx/asixxMYPPdtVJKKPalf8k03vdlnFgOXF07oL+Lk=
Subject key identifier:   CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA
Authority key identifier: 5C:F8:63:99:38:E7:29:CC:3B:CC:1B:AE:E9:04:20:41:54:76:12:06
Certificate issuer:       /CN=209a3aae-fdf3-4626-893c-d4dbbb607dbc
Certificate serial:       010D0C9F4328583E02E61F197423F3FE79127600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/CBFA64760AB720754B1A49B2A4133C847437FAFA.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 24 May 2022 21:12:48 +0000
Certificate not after:    Mon 26 Aug 2024 21:12:48 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:02:e6:1f:19:74:23:f3:fe:79:12:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209a3aae-fdf3-4626-893c-d4dbbb607dbc
        Validity
            Not Before: May 24 21:12:48 2022 GMT
            Not After : Aug 26 21:12:48 2024 GMT
        Subject: CN=fcb20f5966f3d3fe12a6b67c3f0e2b52ed54df65344239c3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e5:73:2d:4b:5e:e7:a5:de:aa:79:b8:1f:ae:
                    05:36:b8:58:b2:91:b9:fa:1b:68:3a:a3:f5:2f:88:
                    03:5e:49:df:c9:46:95:5a:85:92:62:d2:22:13:46:
                    65:19:34:eb:ba:f0:74:48:6c:8a:55:1b:35:17:e3:
                    85:5b:43:fe:93:b3:8e:33:d1:d3:74:d6:69:c9:5d:
                    c9:1d:e7:1a:77:f9:f8:80:dc:3c:b8:6a:65:62:35:
                    df:19:a4:b9:d7:33:c4:7d:fb:b0:6a:d3:95:3b:85:
                    9e:7b:48:7e:19:a8:d2:ab:20:83:2c:90:7e:0d:b8:
                    06:b4:cb:88:2b:5e:5b:be:2a:58:52:89:7f:c4:1b:
                    e8:b3:cd:e7:82:c8:d4:13:49:2c:5b:70:1e:a2:a8:
                    3d:92:25:14:d3:86:a8:fa:94:5e:08:b1:7e:b8:82:
                    e3:3b:5a:20:40:3d:de:b2:c8:ad:58:35:55:70:91:
                    6b:a7:5e:a8:06:ac:3e:a5:14:92:bc:61:fd:32:bf:
                    7c:bd:8a:d8:51:c4:41:80:7e:72:b4:6f:ec:66:e9:
                    9a:6d:45:ab:ca:42:a4:9d:39:98:ce:a3:1e:91:33:
                    8f:ec:52:8a:fd:bf:91:db:92:12:f6:a6:99:38:79:
                    ca:63:82:3e:cf:58:4d:63:5c:51:44:e0:b6:f1:eb:
                    33:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FA:64:76:0A:B7:20:75:4B:1A:49:B2:A4:13:3C:84:74:37:FA:FA
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0180f7ea14e0063a/0/CBFA64760AB720754B1A49B2A4133C847437FAFA.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc/209a3aae-fdf3-4626-893c-d4dbbb607dbc.crl

            X509v3 Authority Key Identifier:
                keyid:5C:F8:63:99:38:E7:29:CC:3B:CC:1B:AE:E9:04:20:41:54:76:12:06

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/209a3aae-fdf3-4626-893c-d4dbbb607dbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:fb:8f:11:e1:ce:2a:9d:e6:e8:17:59:29:ef:97:38:bf:33:
         ca:5e:e6:36:88:1e:2f:e4:99:6f:c4:7c:9e:94:98:96:33:47:
         29:3b:78:94:da:bb:9e:4e:17:ab:c4:7c:3a:31:51:f7:46:cc:
         5b:28:e8:10:89:7e:34:52:c5:61:dd:2b:d3:9d:c7:84:b0:19:
         dd:16:58:64:d0:da:e1:74:91:9f:8a:ba:8e:ae:e3:80:d5:65:
         88:e7:aa:bd:74:1b:7b:24:db:d6:81:c6:b6:0b:8b:c8:5e:63:
         d2:01:17:06:41:9a:1e:2b:51:74:61:b6:54:6b:ca:c0:a9:1e:
         8e:55:09:32:6b:8c:33:ea:a6:06:c1:45:ad:00:19:da:6e:d9:
         a8:02:57:e6:b7:83:2e:b4:3c:f3:76:c0:66:79:03:a2:46:f6:
         12:ac:1c:54:28:1d:4b:73:f3:18:25:25:b4:02:25:2c:ae:00:
         89:ee:b4:0a:9a:ba:e6:80:cc:dd:e4:2a:76:38:97:60:ae:6c:
         02:7c:80:30:1a:15:d8:b4:2d:b0:24:b3:80:9d:96:38:49:f2:
         14:1a:da:e2:da:af:0d:b8:16:6b:12:cf:e8:da:39:10:32:38:
         4a:14:c0:24:02:84:6b:b9:f3:b3:08:52:a6:eb:60:5b:3f:db:
         65:fa:e3:91
-----BEGIN CERTIFICATE-----
MIIGzDCCBbSgAwIBAgIUAQ0Mn0MoWD4C5h8ZdCPz/nkSdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA5YTNhYWUtZmRmMy00NjI2LTg5M2MtZDRkYmJiNjA3
ZGJjMB4XDTIyMDUyNDIxMTI0OFoXDTI0MDgyNjIxMTI0OFowPTE7MDkGA1UEAxMy
ZmNiMjBmNTk2NmYzZDNmZTEyYTZiNjdjM2YwZTJiNTJlZDU0ZGY2NTM0NDIzOWMz
YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw5XMtS17npd6qebgf
rgU2uFiykbn6G2g6o/UviANeSd/JRpVahZJi0iITRmUZNOu68HRIbIpVGzUX44Vb
Q/6Ts44z0dN01mnJXckd5xp3+fiA3Dy4amViNd8ZpLnXM8R9+7Bq05U7hZ57SH4Z
qNKrIIMskH4NuAa0y4grXlu+KlhSiX/EG+izzeeCyNQTSSxbcB6iqD2SJRTThqj6
lF4IsX64guM7WiBAPd6yyK1YNVVwkWunXqgGrD6lFJK8Yf0yv3y9ithRxEGAfnK0
b+xm6ZptRavKQqSdOZjOox6RM4/sUor9v5HbkhL2ppk4ecpjgj7PWE1jXFFE4Lbx
6zMdAgMBAAGjggPQMIIDzDAdBgNVHQ4EFgQUy/pkdgq3IHVLGkmypBM8hHQ3+vow
ggEiBggrBgEFBQcBCwSCARQwggEQMFMGCCsGAQUFBzAFhkdyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODBmN2Vh
MTRlMDA2M2EvMDCBgAYIKwYBBQUHMAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5u
ZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MGY3ZWExNGUwMDYzYS8w
L0NCRkE2NDc2MEFCNzIwNzU0QjFBNDlCMkE0MTMzQzg0NzQzN0ZBRkEubWZ0MDYG
CCsGAQUFBzANhipodHRwczovL3JyZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlv
bi54bWwwDwYDVR0TAQH/BAUwAwEB/zCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHF
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUy
LTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjA5YTNhYWUtZmRmMy00NjI2LTg5M2Mt
ZDRkYmJiNjA3ZGJjLzIwOWEzYWFlLWZkZjMtNDYyNi04OTNjLWQ0ZGJiYjYwN2Ri
Yy5jcmwwHwYDVR0jBBgwFoAUXPhjmTjnKcw7zBuu6QQgQVR2EgYwDgYDVR0PAQH/
BAQDAgEGMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3luYzov
L3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEt
ZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04
ZjZjLWQ2YzkxYjBiODQxNS8yMDlhM2FhZS1mZGYzLTQ2MjYtODkzYy1kNGRiYmI2
MDdkYmMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQClXCYMA4EAgAC
MAgDBgQmAvw7ADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGGmIwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
VfuPEeHOKp3m6BdZKe+XOL8zyl7mNogeL+SZb8R8npSYljNHKTt4lNq7nk4Xq8R8
OjFR90bMWyjoEIl+NFLFYd0r053HhLAZ3RZYZNDa4XSRn4q6jq7jgNVliOeqvXQb
eyTb1oHGtguLyF5j0gEXBkGaHitRdGG2VGvKwKkejlUJMmuMM+qmBsFFrQAZ2m7Z
qAJX5reDLrQ883bAZnkDokb2EqwcVCgdS3PzGCUltAIlLK4Aie60Cpq65oDM3eQq
djiXYK5sAnyAMBoV2LQtsCSzgJ2WOEnyFBra4tqvDbgWaxLP6No5EDI4ShTAJAKE
a7nzswhSputgWz/bZfrjkQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:32 2023 by rpki-client on console-fra.rpki-client.org