Error: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer: CRL has expired

Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/b57e69b3-afc9-328d-8a2e-dea01a41b613.roa
File:                     b57e69b3-afc9-328d-8a2e-dea01a41b613.roa (raw, json)
Hash identifier:          57SYm5CXoaqt/2W0/tfKn+0GbwJEdYz0cZd8YSWI9TE=
Subject key identifier:   AF:6D:AE:70:F7:F1:79:33:18:F3:8D:53:9E:82:F6:A6:7C:FD:97:B6
Certificate issuer:       /CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
Certificate serial:       010D0C9F4328584F6C5831C77B87535E5391CA80
Authority key identifier: 1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/b57e69b3-afc9-328d-8a2e-dea01a41b613.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     31898
IP address blocks:        2603:5000:4040::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:31:c7:7b:87:53:5e:53:91:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=7f3526a7-0e7a-401c-a03a-f89f6284708a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7d:62:0a:e8:ea:7f:c6:0d:8a:74:4e:65:00:
                    b9:0f:89:ab:a5:c8:27:93:9d:b9:4f:fa:e9:09:b0:
                    84:f2:f9:24:a9:7b:c9:a6:fc:d9:de:d4:dc:0d:51:
                    2a:03:a9:b0:0b:01:df:dd:c6:df:26:89:c0:c9:d0:
                    19:eb:83:91:b3:59:30:03:fe:ce:48:05:f9:03:01:
                    76:1f:23:1a:79:ad:3a:b1:62:3a:04:93:b7:93:67:
                    20:dd:ed:8b:8e:e1:d7:3b:dc:65:4d:53:0f:bb:6d:
                    81:4e:c9:9d:68:10:b5:e5:6c:a4:9c:29:ef:7e:72:
                    d4:fd:79:e0:55:09:93:ca:88:64:b7:98:f5:15:33:
                    27:2f:c6:d6:74:db:11:29:f8:bc:52:2b:86:e1:4c:
                    e1:7a:34:13:1f:1d:05:2a:69:c1:a0:9c:d2:ca:33:
                    d8:4f:7f:63:76:53:24:32:86:f4:17:56:f6:c1:45:
                    c5:4b:99:7e:74:33:08:66:00:35:61:ff:fb:ee:42:
                    72:d2:43:9e:13:c2:ce:fc:0c:b1:74:dd:1f:a7:b0:
                    7a:ae:23:86:45:62:fa:9f:5b:b2:96:cb:8f:1a:df:
                    aa:d6:46:77:df:1b:ec:45:54:0d:e2:22:cf:7d:24:
                    07:e7:23:45:7b:ba:99:df:39:88:ce:e5:d5:75:9f:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6D:AE:70:F7:F1:79:33:18:F3:8D:53:9E:82:F6:A6:7C:FD:97:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/b57e69b3-afc9-328d-8a2e-dea01a41b613.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5000:4040::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a8:28:8f:0c:e6:c1:ad:2a:75:c4:0f:71:6d:8d:c9:2d:6e:
         70:a4:02:63:e9:97:df:4b:5b:95:7c:a2:89:40:8d:a5:10:99:
         d7:ca:24:bf:bf:5a:51:6e:8f:c0:e0:35:dc:78:5e:e5:cb:b6:
         0e:ad:c6:54:df:62:37:26:ff:a5:81:6e:e0:b0:ad:61:cc:05:
         48:7c:60:f7:fb:d0:e2:54:81:73:23:75:55:23:e5:42:7f:ea:
         22:4d:d9:49:ea:f0:8a:a2:da:ef:82:b5:41:58:62:12:f5:58:
         a0:de:0a:64:84:f7:8e:57:09:fc:a4:8f:ce:5c:19:46:de:ad:
         4b:be:44:58:18:ec:b1:84:6a:15:97:b9:01:96:0b:21:90:a2:
         ec:f9:84:f2:12:ef:3a:a7:d4:ae:00:fa:b0:b6:87:29:87:d8:
         ab:b6:ab:15:25:4d:c2:04:63:46:e9:7e:19:0a:d4:4e:69:4c:
         21:3e:ba:23:06:5b:de:6e:08:80:90:84:a7:dd:85:d7:e8:ed:
         e8:56:1e:84:19:5e:c5:b0:bf:23:77:04:28:92:3b:fc:35:23:
         03:9e:82:e9:c5:a0:20:6d:35:79:03:62:6c:56:43:0f:9b:e1:
         40:31:b8:58:6f:de:e7:c0:fe:d8:5d:31:d5:9f:8d:23:d6:3b:
         50:a1:a3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:46:07 2026 by rpki-client