Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7f823fec-f0b6-4578-ae15-4431ee52f44f/fcb20f5966f5966299469c58259c8cfd81ea9ca7a7aa14628d.cer
File:                     fcb20f5966f5966299469c58259c8cfd81ea9ca7a7aa14628d.cer (raw, json)
Hash identifier:          8CR0PMJv2Ov33u7iunEF+GL4MfTApR8ObZaQ6wLY5/k=
Subject key identifier:   15:7B:AF:2F:85:11:E6:CB:88:15:D0:65:92:EF:0B:8C:85:F2:7E:CA
Authority key identifier: 04:4F:7C:14:8C:13:59:65:0E:48:0E:A0:F6:95:BC:8D:3F:52:79:28
Certificate issuer:       /CN=7f823fec-f0b6-4578-ae15-4431ee52f44f
Certificate serial:       010D0C9F4328584221A99EBF7DF63A185B997800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7f823fec-f0b6-4578-ae15-4431ee52f44f.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade889191f601889199a6840018/0/157BAF2F8511E6CB8815D06592EF0B8C85F27ECA.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade889191f601889199a6840018/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Tue 06 Jun 2023 16:48:42 +0000
Certificate not after:    Mon 08 Sep 2025 16:48:42 +0000
Subordinate resources:    AS: 399970
                          IP: 149.112.152.0/22
                          IP: 2602:fc3b::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:21:a9:9e:bf:7d:f6:3a:18:5b:99:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f823fec-f0b6-4578-ae15-4431ee52f44f
        Validity
            Not Before: Jun  6 16:48:42 2023 GMT
            Not After : Sep  8 16:48:42 2025 GMT
        Subject: CN=fcb20f5966f5966299469c58259c8cfd81ea9ca7a7aa14628d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:0e:56:ec:d3:f7:68:f3:92:59:ec:22:64:
                    75:23:8f:68:09:a8:f6:2e:66:6b:44:e5:93:4e:9d:
                    8b:86:20:3e:e7:b1:29:69:6d:77:4a:9b:29:e0:87:
                    f6:b3:f1:fd:90:e1:97:0f:21:74:f2:b4:5e:58:77:
                    4e:0e:fd:6a:0c:ca:7a:4d:eb:f1:45:c0:34:8f:e3:
                    ec:bc:27:9b:f1:cc:5f:40:11:e7:ad:d5:42:4b:bc:
                    e6:c4:0e:33:c2:de:a3:af:b8:7e:20:b2:25:93:71:
                    f3:3c:96:cb:33:69:aa:5c:b8:1d:81:bf:22:1a:e4:
                    3e:6d:00:74:f6:c8:cb:3d:1c:f9:6e:b6:ab:8a:e6:
                    ea:b9:62:5d:ff:ee:83:79:85:7f:06:48:a4:d4:68:
                    da:6d:f1:ad:83:4d:bf:ce:d2:81:bf:ac:57:c1:39:
                    49:7c:7b:65:ad:a7:e1:26:c0:59:3f:83:2b:72:93:
                    06:70:96:08:e4:ee:17:15:da:75:bb:3f:97:ab:2c:
                    36:53:90:05:5c:0a:90:18:bc:b6:7d:2d:5d:4d:37:
                    09:ae:a8:08:93:73:4a:bb:97:f8:04:02:84:d8:ea:
                    78:b5:6a:ff:65:62:51:32:3b:7c:77:f3:26:20:14:
                    73:54:89:5f:4a:70:81:21:00:8d:93:62:f3:06:a1:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7B:AF:2F:85:11:E6:CB:88:15:D0:65:92:EF:0B:8C:85:F2:7E:CA
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade889191f601889199a6840018/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade889191f601889199a6840018/0/157BAF2F8511E6CB8815D06592EF0B8C85F27ECA.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7f823fec-f0b6-4578-ae15-4431ee52f44f/7f823fec-f0b6-4578-ae15-4431ee52f44f.crl

            X509v3 Authority Key Identifier:
                keyid:04:4F:7C:14:8C:13:59:65:0E:48:0E:A0:F6:95:BC:8D:3F:52:79:28

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7f823fec-f0b6-4578-ae15-4431ee52f44f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:86:ff:b8:31:b6:01:91:49:37:15:aa:aa:15:56:b1:85:45:
         87:62:9d:d0:d8:f7:1c:a3:69:82:8f:d0:5f:63:54:29:a9:1d:
         3c:72:1d:93:0c:13:f3:37:34:4f:7c:81:52:6e:b7:e1:8f:7b:
         7d:39:22:46:e2:09:d2:22:88:2c:66:23:7c:de:a6:cb:82:2e:
         23:54:b4:41:83:44:38:49:23:84:a8:76:ca:5e:fd:31:4f:67:
         f5:89:37:9e:1d:9f:79:d3:7b:60:5b:25:b3:80:1a:c8:78:00:
         3f:e0:97:6d:4a:50:28:ed:c6:6d:b3:72:8c:85:de:2d:0d:0d:
         88:13:eb:33:59:af:14:f8:76:94:02:fd:99:81:d9:26:7f:8b:
         b7:b3:a2:5d:00:9a:0b:ad:54:cb:b1:f5:90:88:9e:dc:87:ca:
         5a:ce:78:46:97:41:99:31:31:be:f9:b3:16:9c:06:1e:83:fd:
         e5:a7:a1:1e:51:55:e3:9a:fd:61:bf:2d:a4:73:29:a0:88:3d:
         fa:1a:21:55:8a:d6:34:73:7b:ad:f1:1b:26:b1:84:d7:de:9f:
         9f:e4:46:a6:8b:e9:cf:f2:88:86:56:b8:b6:37:95:84:d8:89:
         c7:29:d8:71:ed:00:02:6c:0d:8b:05:48:10:7b:3f:6b:44:87:
         7b:62:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:40 2024 by rpki-client on console-ams.rpki-client.org