Error: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer: CRL has expired

Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ee359458-4c52-367a-85db-9abcebe334c7.roa
File:                     ee359458-4c52-367a-85db-9abcebe334c7.roa (raw, json)
Hash identifier:          Cmxl4q0JdKFhFLebr+RhAbS48/4c+PCG/X9xWbpW5a0=
Subject key identifier:   29:21:D3:53:2F:83:80:06:3A:03:7E:18:AC:FB:FD:7C:C4:05:D6:42
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F4C3DDD24838312D36569AAA0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ee359458-4c52-367a-85db-9abcebe334c7.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     15169
IP address blocks:        64.233.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:dd:24:83:83:12:d3:65:69:aa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=62be9d53-6f63-4cae-b203-860da3998d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1b:c8:16:86:cd:79:69:5b:c2:dd:fe:1c:79:
                    ac:2b:56:7f:ff:c6:2f:01:dd:e9:db:c3:fb:4e:b1:
                    8f:c2:f1:fc:4f:d5:41:03:72:46:16:3c:ff:b5:d9:
                    ea:4a:c3:00:1c:48:6a:0a:76:a2:5e:05:a3:17:00:
                    61:c6:c7:46:d4:28:07:7a:58:0d:61:74:59:52:b5:
                    2b:b1:f1:0f:d0:a3:e3:a8:13:1e:20:bd:44:1a:80:
                    1f:52:c7:e1:71:27:93:fb:d8:ee:55:d6:4a:e9:41:
                    36:e3:1a:17:57:fc:0e:3a:24:f7:1b:f2:be:de:f0:
                    02:e0:c2:19:7c:e3:c3:5b:27:97:53:b2:c2:dd:0a:
                    79:be:30:86:aa:86:94:eb:84:8a:d3:69:82:74:a8:
                    f5:fa:78:a6:41:c1:0d:d8:58:6d:07:83:11:96:32:
                    43:be:6c:09:5d:75:6f:8b:09:24:cc:52:77:88:84:
                    0f:be:ed:d5:c8:5c:f4:aa:4b:b0:6c:85:6c:2c:1e:
                    6a:69:7a:48:3c:d0:71:62:44:ff:f5:29:6e:cb:8f:
                    4c:0e:8c:22:15:ad:9e:d7:9d:b5:0d:62:96:15:1d:
                    12:bd:6a:e7:5d:5c:e2:f1:9d:e2:a4:0b:9c:9b:44:
                    fa:e1:6f:21:4a:a2:4d:ad:e7:94:fa:59:c5:fd:88:
                    b2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:21:D3:53:2F:83:80:06:3A:03:7E:18:AC:FB:FD:7C:C4:05:D6:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ee359458-4c52-367a-85db-9abcebe334c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.233.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:ee:b5:f4:8d:bc:86:e9:9f:d1:22:7d:44:15:c5:69:c3:53:
         8e:c6:a7:61:c1:af:ad:29:35:30:eb:5b:9f:19:4f:a5:8a:c2:
         cc:7c:dc:3f:69:3d:16:c5:30:bf:90:ec:af:93:52:70:5b:53:
         18:06:5d:bf:2d:1a:0f:f7:75:fc:e5:00:99:4d:fd:41:66:e0:
         b6:3f:f8:86:f4:62:44:d3:b5:a6:e0:bf:53:2d:c6:e7:69:40:
         27:e8:ce:69:c4:b3:7c:97:88:ca:95:d9:14:64:f4:39:82:4d:
         7f:92:57:d6:0c:c3:99:70:f1:b3:81:d6:74:f1:f2:6f:7d:73:
         9a:a3:79:02:af:9d:5f:d0:3c:dc:a5:62:78:ad:05:7c:64:99:
         68:a6:3d:e6:a7:93:61:40:dd:45:29:34:92:76:a5:73:0e:e3:
         fe:bb:c1:82:e0:10:d0:6a:8e:43:e0:3d:76:13:59:e3:b8:62:
         71:f1:bf:73:26:fd:bd:65:8c:10:ce:6a:09:79:68:c4:fd:ca:
         67:50:36:0e:3d:d1:2d:fb:22:de:90:10:63:25:65:a1:dc:8d:
         42:b1:6b:df:91:99:e0:0e:9e:cc:fe:c9:f2:b1:c3:4f:39:e1:
         df:4e:1b:f3:e6:ce:4a:79:be:a4:99:30:d5:69:b4:4b:54:b7:
         66:72:c2:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPd0kg4MS02VpqqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk
NjJiZTlkNTMtNmY2My00Y2FlLWIyMDMtODYwZGEzOTk4ZDlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RvIFobNeWlbwt3+HHmsK1Z//8YvAd3p28P7
TrGPwvH8T9VBA3JGFjz/tdnqSsMAHEhqCnaiXgWjFwBhxsdG1CgHelgNYXRZUrUr
sfEP0KPjqBMeIL1EGoAfUsfhcSeT+9juVdZK6UE24xoXV/wOOiT3G/K+3vAC4MIZ
fOPDWyeXU7LC3Qp5vjCGqoaU64SK02mCdKj1+nimQcEN2FhtB4MRljJDvmwJXXVv
iwkkzFJ3iIQPvu3VyFz0qkuwbIVsLB5qaXpIPNBxYkT/9Sluy49MDowiFa2e1521
DWKWFR0SvWrnXVzi8Z3ipAucm0T64W8hSqJNreeU+lnF/Yiy+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCkh01Mvg4AGOgN+GKz7/XzEBdZCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZWUzNTk0NTgtNGM1Mi0z
NjdhLTg1ZGItOWFiY2ViZTMzNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOm1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKXutfSNvIbpn9EifUQVxWnDU47Gp2HBr60pNTDrW58ZT6WKwsx83D9p
PRbFML+Q7K+TUnBbUxgGXb8tGg/3dfzlAJlN/UFm4LY/+Ib0YkTTtabgv1Mtxudp
QCfozmnEs3yXiMqV2RRk9DmCTX+SV9YMw5lw8bOB1nTx8m99c5qjeQKvnV/QPNyl
YnitBXxkmWimPeank2FA3UUpNJJ2pXMO4/67wYLgENBqjkPgPXYTWeO4YnHxv3Mm
/b1ljBDOagl5aMT9ymdQNg490S37It6QEGMlZaHcjUKxa9+RmeAOnsz+yfKxw085
4d9OG/Pmzkp5vqSZMNVptEtUt2Zywio=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:37:02 2026 by rpki-client