Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/D9227930A3E025CD3EE91059F57EFC7573645142.cer
File:                     D9227930A3E025CD3EE91059F57EFC7573645142.cer (raw, json)
Hash identifier:          2C83aX/0Z9VKO5u1edOuS4bWM8CSabklxLwe6PJm2xo=
Subject key identifier:   D9:22:79:30:A3:E0:25:CD:3E:E9:10:59:F5:7E:FC:75:73:64:51:42
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       15D5514432A9422868BA1A8E9085E4EFD5A836FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Tue 24 Dec 2024 12:30:38 +0000
Certificate not after:    Tue 23 Dec 2025 12:35:38 +0000
Subordinate resources:    IP: 2a0b:9e40::/30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d5:51:44:32:a9:42:28:68:ba:1a:8e:90:85:e4:ef:d5:a8:36:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec 24 12:30:38 2024 GMT
            Not After : Dec 23 12:35:38 2025 GMT
        Subject: CN=D9227930A3E025CD3EE91059F57EFC7573645142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:2f:ae:07:2e:65:8a:be:9a:a7:86:f3:69:
                    0c:a9:0a:21:ae:e9:cf:6b:b2:b8:2c:0c:5e:05:85:
                    28:00:a5:20:a3:03:d5:71:2d:64:b9:8f:b6:fa:e3:
                    c3:9f:7f:3e:bc:d4:c9:3e:b7:ee:f5:98:d4:66:0b:
                    60:39:c8:2d:c7:bd:0e:cb:ac:88:3a:33:59:3d:70:
                    52:a3:4a:a1:a7:3d:5d:ea:84:dc:00:e5:ec:d9:e2:
                    f7:b6:0a:ed:70:a7:8f:d7:74:27:78:7d:80:11:7a:
                    0c:7b:25:40:31:3d:b3:39:27:dc:81:90:cb:95:16:
                    69:8b:dd:3f:8e:4d:0f:3c:fe:c9:64:f2:80:ff:32:
                    4d:c2:2f:98:f0:1d:2d:3d:e6:25:2d:41:4e:6c:d8:
                    0c:13:78:91:81:36:62:1d:8d:8f:93:fc:da:46:fd:
                    a9:af:31:3c:70:5a:62:78:29:a1:4f:b6:60:6d:8d:
                    55:0c:b9:e0:93:36:8b:26:51:9e:28:61:24:2c:d6:
                    67:d1:a2:f1:71:48:57:58:0a:b2:19:c7:86:98:92:
                    ae:7d:17:06:50:29:69:b7:94:e8:44:44:90:d2:ec:
                    37:55:b9:3d:b4:47:d1:51:49:10:40:81:af:61:5f:
                    41:58:62:f2:34:4d:fd:eb:93:c9:fe:49:1e:c2:7a:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:22:79:30:A3:E0:25:CD:3E:E9:10:59:F5:7E:FC:75:73:64:51:42
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/4/D9227930A3E025CD3EE91059F57EFC7573645142.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:9e40::/30

    Signature Algorithm: sha256WithRSAEncryption
         16:e4:e8:b5:bf:31:ef:01:e8:1a:ca:51:6a:6a:66:bc:24:ab:
         cd:ef:a6:11:e2:a2:c7:d2:91:a1:ad:88:b7:3c:cd:09:d9:7f:
         2c:73:f6:23:14:40:6e:76:9c:52:a5:98:01:b2:40:31:7c:63:
         e8:33:b2:18:51:e1:4c:8d:67:dd:e3:38:8e:41:44:64:54:e8:
         58:22:ad:79:67:b1:03:74:63:22:d2:63:2a:05:9d:dd:95:2f:
         b5:68:cf:7e:e4:c2:ba:45:c7:88:27:9b:19:a3:fb:50:1c:3b:
         cd:34:14:47:63:b7:97:cd:df:20:24:88:86:99:84:92:f3:bb:
         75:e0:5e:3a:f7:fa:31:44:b9:58:62:e0:6a:c0:5c:87:6a:a6:
         92:45:fe:ca:95:b6:53:e4:dc:03:b5:50:39:52:00:43:15:97:
         f0:9f:0f:de:55:0e:12:21:dd:30:dc:29:66:9a:cc:53:b7:a7:
         84:40:b7:33:26:9f:5e:51:94:eb:4c:33:99:e1:20:f7:0a:7e:
         df:9b:2c:5c:51:40:3b:16:0e:c6:f6:a8:b1:ed:02:01:16:de:
         a6:93:14:c1:a5:ce:81:43:ed:96:71:d2:05:74:cc:9d:87:ca:
         5b:d3:5e:cc:32:8e:b9:95:52:68:f0:7d:70:b7:71:07:cb:cb:
         37:cd:b6:3a
-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIUFdVRRDKpQihouhqOkIXk79WoNv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDEyMjQxMjMwMzhaFw0yNTEyMjMxMjM1MzhaMDMxMTAvBgNV
BAMTKEQ5MjI3OTMwQTNFMDI1Q0QzRUU5MTA1OUY1N0VGQzc1NzM2NDUxNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCi+uBy5lir6ap4bzaQypCiGu
6c9rsrgsDF4FhSgApSCjA9VxLWS5j7b648Offz681Mk+t+71mNRmC2A5yC3HvQ7L
rIg6M1k9cFKjSqGnPV3qhNwA5ezZ4ve2Cu1wp4/XdCd4fYARegx7JUAxPbM5J9yB
kMuVFmmL3T+OTQ88/slk8oD/Mk3CL5jwHS095iUtQU5s2AwTeJGBNmIdjY+T/NpG
/amvMTxwWmJ4KaFPtmBtjVUMueCTNosmUZ4oYSQs1mfRovFxSFdYCrIZx4aYkq59
FwZQKWm3lOhERJDS7DdVuT20R9FRSRBAga9hX0FYYvI0Tf3rk8n+SR7CemIhAgMB
AAGjggLSMIICzjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTZInkwo+AlzT7p
EFn1fvx1c2RRQjAfBgNVHSMEGDAWgBR5lDjxsXYq7vijXPTmy66XaZvQIDAOBgNV
HQ8BAf8EBAMCAQYwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzc5OTQzOEYxQjE3NjJBRUVGOEEzNUNGNEU2Q0JBRTk3Njk5QkQwMjAu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lWlE0OGJGMkt1NzRvMXowNXN1dWwy
bWIwQ0EuY2VyMIIBPwYIKwYBBQUHAQsEggExMIIBLTBfBggrBgEFBQcwBYZTcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmNmOGJh
Ny1jYjAyLTQxOGItYmUwNC00ZDlmM2EwN2U5NTAvNC8wgYsGCCsGAQUFBzAKhn9y
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIyY2Y4
YmE3LWNiMDItNDE4Yi1iZTA0LTRkOWYzYTA3ZTk1MC80L0Q5MjI3OTMwQTNFMDI1
Q0QzRUU5MTA1OUY1N0VGQzc1NzM2NDUxNDIubWZ0MDwGCCsGAQUFBzANhjBodHRw
czovL3JyZHAucGFhcy5ycGtpLnJpcGUubmV0L25vdGlmaWNhdGlvbi54bWwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw
BwMFAioLnkAwDQYJKoZIhvcNAQELBQADggEBABbk6LW/Me8B6BrKUWpqZrwkq83v
phHiosfSkaGtiLc8zQnZfyxz9iMUQG52nFKlmAGyQDF8Y+gzshhR4UyNZ93jOI5B
RGRU6FgirXlnsQN0YyLSYyoFnd2VL7Voz37kwrpFx4gnmxmj+1AcO800FEdjt5fN
3yAkiIaZhJLzu3XgXjr3+jFEuVhi4GrAXIdqppJF/sqVtlPk3AO1UDlSAEMVl/Cf
D95VDhIh3TDcKWaazFO3p4RAtzMmn15RlOtMM5nhIPcKft+bLFxRQDsWDsb2qLHt
AgEW3qaTFMGlzoFD7ZZx0gV0zJ2HylvTXswyjrmVUmjwfXC3cQfLyzfNtjo=
-----END CERTIFICATE-----