Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f969f74a-6f05-4205-b595-5765b9d28c1e/278aab878f9304d59b8cd4c70371f4f87efa5ce7331e2ccb74.cer
File:                     278aab878f9304d59b8cd4c70371f4f87efa5ce7331e2ccb74.cer (raw, json)
Hash identifier:          5VC1SSGxZFE5cyWEoJHSeiWoE0yZiSCwWYP4l46NuWc=
Subject key identifier:   52:0A:16:08:62:51:9F:78:68:4B:D3:2C:28:26:63:59:96:6D:C2:CB
Authority key identifier: F8:F1:F9:D0:01:5B:C8:8B:43:7C:39:53:5D:9F:E9:F9:18:94:F4:CA
Certificate issuer:       /CN=f969f74a-6f05-4205-b595-5765b9d28c1e
Certificate serial:       010D0C9F4328583DA38DC405F8AED8FDDFC51E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f969f74a-6f05-4205-b595-5765b9d28c1e.cer
Manifest:                 rsync://rpki-rsync.us-east-2.amazonaws.com/volume/4602c172-3408-4a23-9def-b0a5d29bdedc/manifest.mft
caRepository:             rsync://rpki-rsync.us-east-2.amazonaws.com/volume/4602c172-3408-4a23-9def-b0a5d29bdedc/
Notify URL:               https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/4602c172-3408-4a23-9def-b0a5d29bdedc/notification.xml
Certificate not before:   Wed 20 Apr 2022 17:32:59 +0000
Certificate not after:    Tue 20 Apr 2032 17:32:59 +0000
Subordinate resources:    AS: 400098
                          IP: 199.36.120.0/22
                          IP: 2605:c040::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a3:8d:c4:05:f8:ae:d8:fd:df:c5:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f969f74a-6f05-4205-b595-5765b9d28c1e
        Validity
            Not Before: Apr 20 17:32:59 2022 GMT
            Not After : Apr 20 17:32:59 2032 GMT
        Subject: CN=278aab878f9304d59b8cd4c70371f4f87efa5ce7331e2ccb74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d8:cf:27:28:b5:44:3b:b1:95:d5:32:c7:76:
                    76:41:c4:63:b2:96:58:c1:08:62:45:f5:6c:7c:f7:
                    89:f3:52:b3:fe:03:cf:36:51:4f:df:a4:dd:d4:ff:
                    f6:74:d9:fb:12:f9:c3:71:7e:11:71:7f:c2:de:fe:
                    27:0e:f4:8d:6d:2d:b8:c6:53:3e:53:b7:75:22:42:
                    d8:23:99:60:67:1d:8f:9d:96:b2:2f:71:5f:f2:4c:
                    0c:58:b2:c6:a6:05:04:ce:1c:f3:a4:34:a0:7d:3c:
                    46:8b:89:7a:71:e5:73:10:a4:7e:4c:8d:65:2c:53:
                    b5:fd:f8:45:81:9f:7c:62:2f:e3:71:a4:4a:94:71:
                    90:d1:a2:87:08:8a:b5:d2:03:c4:43:ab:33:3f:44:
                    47:df:c9:29:89:ce:56:75:80:4d:52:a8:09:da:50:
                    f6:15:f3:a6:e9:d8:1e:69:51:eb:af:3a:bd:a9:b8:
                    1e:07:40:4b:f2:8c:ac:70:a5:a2:22:d5:fe:12:e2:
                    50:4c:cf:58:81:08:d3:06:51:3c:e2:1f:bc:33:83:
                    1d:e2:a2:27:39:e8:54:9a:c3:92:47:8c:d1:9d:b5:
                    d2:50:87:be:f6:25:84:79:f4:ac:8a:1a:1d:29:b8:
                    3c:a6:6a:89:ad:0d:c5:d0:0b:61:63:79:fa:00:4e:
                    dc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0A:16:08:62:51:9F:78:68:4B:D3:2C:28:26:63:59:96:6D:C2:CB
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/4602c172-3408-4a23-9def-b0a5d29bdedc/
                RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/4602c172-3408-4a23-9def-b0a5d29bdedc/manifest.mft
                RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/4602c172-3408-4a23-9def-b0a5d29bdedc/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f969f74a-6f05-4205-b595-5765b9d28c1e/f969f74a-6f05-4205-b595-5765b9d28c1e.crl

            X509v3 Authority Key Identifier:
                keyid:F8:F1:F9:D0:01:5B:C8:8B:43:7C:39:53:5D:9F:E9:F9:18:94:F4:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f969f74a-6f05-4205-b595-5765b9d28c1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/22
                IPv6:
                  2605:c040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400098

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:61:56:2a:9a:dd:1b:19:65:7b:07:8e:40:5e:08:19:d4:83:
         c9:93:c9:04:44:3c:55:2c:e5:43:e0:9f:71:d5:0f:77:8a:bb:
         b8:50:84:af:e2:2f:44:46:88:7d:62:01:fc:a7:49:55:d6:0e:
         a9:8c:cd:2a:6d:ef:a9:20:10:84:17:9b:c1:c2:95:ac:93:c8:
         69:06:53:24:46:1e:8b:a3:15:aa:e7:6f:ae:39:a7:28:20:82:
         8c:a1:85:41:14:7f:15:67:e5:df:5a:f7:ee:00:9f:fb:0e:11:
         7c:f3:eb:ce:3e:c1:00:9a:13:5e:90:d1:5c:9d:74:db:12:da:
         1f:c4:a3:dc:d5:ce:0d:bf:86:34:45:e1:d5:6e:59:f7:5d:23:
         1e:9a:63:8f:45:b2:05:8a:7f:ac:93:c2:d6:c9:c6:b3:74:88:
         15:c7:f0:3d:93:08:7e:58:de:e6:0e:14:5f:1e:d7:0b:ec:c5:
         d4:e4:52:7b:87:31:e3:72:47:f4:53:5c:85:e9:f0:80:0a:59:
         8a:a6:e3:b7:65:f8:4c:95:22:71:9c:1a:09:35:16:5e:a8:87:
         fa:f6:0a:5a:b2:b0:0e:4c:75:f3:ac:8c:b3:03:92:dc:07:e5:
         1a:24:ed:af:fb:19:41:87:8f:15:ad:4d:6f:00:3e:6e:7e:0b:
         d2:ee:3b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org