Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
File:                     fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer (raw, json)
Hash identifier:          gkCKhUF1rWzF8Xdp+KvBKZpX15wHermq1LSk3nk4k1o=
Subject key identifier:   67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority key identifier: A8:9A:41:A2:EF:E5:6C:14:12:A0:B1:1F:71:6A:DA:F6:10:C9:1C:A1
Certificate issuer:       /CN=86ca186f-7f9b-47a9-b621-3d583ee8498c
Certificate serial:       010D0C9F432858421F1029396C35CCD9D4D0E580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Mon 05 Jun 2023 18:27:53 +0000
Certificate not after:    Sun 07 Sep 2025 18:27:53 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:1f:10:29:39:6c:35:cc:d9:d4:d0:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86ca186f-7f9b-47a9-b621-3d583ee8498c
        Validity
            Not Before: Jun  5 18:27:53 2023 GMT
            Not After : Sep  7 18:27:53 2025 GMT
        Subject: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7c:40:ab:ce:38:b8:a4:6a:25:88:07:19:b2:
                    46:d5:17:77:50:ed:a9:0d:fa:b5:7a:52:98:38:f7:
                    c3:c8:6f:71:cf:4e:ac:67:1d:fb:a9:89:6a:fe:f4:
                    17:a7:f4:d5:5c:68:cc:a2:8a:4a:5a:0f:f2:c3:86:
                    1d:4a:ef:2b:e7:23:01:35:71:98:1e:e2:07:4d:74:
                    3f:b9:5e:f1:21:9e:81:25:a4:ee:bd:1c:d0:62:d3:
                    63:08:64:49:cf:12:a1:a6:89:aa:13:13:71:2a:9b:
                    13:98:8e:b7:3c:08:d1:05:e0:b7:fa:8e:a4:bb:2f:
                    2e:24:b7:25:00:a3:fb:88:7a:06:48:86:84:df:db:
                    0e:95:88:ce:c7:fd:5e:d6:17:b8:cc:6f:55:eb:85:
                    93:0d:a1:ef:19:60:ee:cc:89:ac:58:31:fd:32:e6:
                    c1:cf:ac:93:a6:b2:08:e9:7e:e4:63:94:96:e6:f8:
                    68:e4:44:a0:05:75:1b:71:60:71:d4:5c:04:4f:b5:
                    bb:cc:a8:82:1b:ff:54:ca:a1:91:1e:e7:d1:00:5d:
                    80:f7:7b:9d:02:cc:1d:5b:23:65:0a:39:4e:ba:80:
                    f0:2a:45:06:92:c3:61:f7:cc:24:a0:18:0b:9f:b1:
                    ca:6a:6c:fb:4a:bb:fd:b3:62:86:26:84:64:79:4c:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/86ca186f-7f9b-47a9-b621-3d583ee8498c.crl

            X509v3 Authority Key Identifier:
                keyid:A8:9A:41:A2:EF:E5:6C:14:12:A0:B1:1F:71:6A:DA:F6:10:C9:1C:A1

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:68:d6:cc:61:c9:2e:09:a3:c4:9a:64:4d:ea:5c:e5:4c:49:
         cf:46:2b:dd:31:22:a1:c4:3e:4a:79:9a:e9:8b:48:db:6b:e6:
         63:63:1f:61:b9:d1:e2:9e:9d:8f:6c:41:31:94:0f:eb:32:5d:
         2f:e5:48:9e:e3:5d:ab:83:35:04:41:ce:a2:7a:af:80:22:75:
         5a:9e:a4:24:0f:83:c7:6c:36:63:cc:d8:f9:b0:04:4b:81:5c:
         19:5b:bd:e1:24:54:08:b7:04:5e:fa:d1:d7:81:b1:71:ec:0f:
         0b:8f:5e:49:a9:2e:8f:68:a6:09:d6:2b:85:af:55:40:92:a4:
         81:2f:78:16:9f:89:d4:e0:be:2b:f3:21:2c:a0:81:c1:24:5f:
         ec:96:17:03:a9:78:ac:d1:64:72:6e:d2:1a:f2:df:e1:35:ed:
         d9:18:b0:d8:a7:b9:2e:c6:ce:ab:5a:57:6b:79:6f:46:94:ac:
         8b:5f:95:08:92:f2:7e:4b:13:47:26:19:fa:90:77:4e:2c:29:
         a0:85:e7:fd:bd:ec:26:12:12:ec:17:dc:ef:5a:6f:70:00:77:
         89:bc:eb:84:e8:12:a8:1d:dd:93:4c:15:e0:5c:2d:3a:fd:19:
         bc:80:8b:af:61:00:a2:21:99:bb:84:f0:6f:86:8e:82:1e:57:
         e7:9a:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:40 2024 by rpki-client on console-ams.rpki-client.org