Error: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer: CRL has expired

Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS206604.roa
File:                     AS206604.roa (raw, json)
Hash identifier:          WmT1+R2nLuLX5NRWcEimG+F3EIFmte1tICUsVyX1Pk4=
Subject key identifier:   35:B0:79:FF:B2:A2:6A:A7:70:00:F5:51:C8:B6:F6:2D:49:25:D2:19
Certificate issuer:       /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial:       6CF8FE72C5F6B472283CE38AE32F781502591389
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS206604.roa
Signing time:             Tue 27 Oct 2026 08:21:28 +0000
ROA not before:           Tue 27 Oct 2026 08:16:28 +0000
ROA not after:            Tue 26 Oct 2027 08:21:28 +0000
asID:                     206604
IP address blocks:        2a0b:4e07:38::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f8:fe:72:c5:f6:b4:72:28:3c:e3:8a:e3:2f:78:15:02:59:13:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
        Validity
            Not Before: Oct 27 08:16:28 2026 GMT
            Not After : Oct 26 08:21:28 2027 GMT
        Subject: CN=35B079FFB2A26AA77000F551C8B6F62D4925D219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ed:88:8d:d4:58:10:99:56:07:6b:c9:08:a9:
                    b8:4c:b3:98:eb:b1:a2:a5:09:8f:25:74:90:3d:35:
                    12:61:ed:b6:b9:62:3f:21:07:ba:b9:61:05:38:78:
                    58:61:1e:43:ce:99:66:b3:bf:a7:da:70:01:2a:8b:
                    a3:23:42:2e:f6:24:8a:61:52:84:b4:a4:7d:f9:79:
                    f6:5f:a9:a2:40:41:ad:c8:d7:77:96:19:2a:2c:0b:
                    cc:0c:49:21:cc:22:0d:67:cf:f2:af:54:97:ab:d9:
                    e9:a3:14:16:ed:ff:54:5d:5c:f8:c9:74:41:b3:88:
                    f9:4f:f3:f3:2c:1e:dd:7e:fa:34:af:d6:72:2d:0b:
                    53:52:e7:1c:04:8d:83:c7:93:1a:d2:97:e4:64:b7:
                    43:c1:99:46:10:05:96:f0:88:8e:29:31:0a:04:62:
                    58:2d:7d:d8:d6:15:7d:73:ad:d9:b8:b5:94:47:7a:
                    f9:6d:07:8c:03:8a:19:04:47:5a:ef:5e:b3:c7:04:
                    50:9f:9a:81:b8:81:b3:9e:ca:79:bb:fe:fb:6d:05:
                    8a:25:5e:5a:25:e7:fb:fc:e5:16:1a:27:dc:61:d2:
                    9c:63:d6:8e:db:30:ce:ad:90:f8:6a:8b:61:e6:14:
                    0c:35:46:87:ff:e3:73:e1:c5:96:ef:b8:8b:33:ed:
                    ff:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B0:79:FF:B2:A2:6A:A7:70:00:F5:51:C8:B6:F6:2D:49:25:D2:19
            X509v3 Authority Key Identifier:
                keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/AS206604.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:38::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:36:b9:db:26:86:5c:97:3b:02:48:21:ce:0b:de:f8:cb:c0:
         f3:39:4a:30:cd:87:b3:1a:ea:bb:49:2e:81:ca:31:b4:e5:84:
         59:d3:d3:93:e4:ea:2c:22:4c:50:80:94:f3:82:0d:67:bc:c0:
         5a:19:d2:19:64:31:5d:4b:2f:1b:d6:3f:ca:b4:16:8f:30:de:
         82:e3:90:a8:27:e7:da:af:9c:72:97:06:9d:76:27:b4:52:d7:
         ac:08:2a:9b:bd:f2:b5:de:5d:96:ce:67:c5:07:b7:b3:27:04:
         ef:41:49:39:f7:e0:13:14:08:79:5a:43:59:e9:03:01:5b:d4:
         10:c2:d1:de:0f:de:61:5e:c8:af:05:68:b8:b5:ad:10:fc:82:
         97:6f:28:c8:d3:bf:a5:33:d5:d6:be:af:ed:dc:08:7f:9e:fb:
         ed:0d:9d:c2:2c:d4:47:2e:08:91:f3:76:4e:d2:d6:a9:d6:cd:
         34:28:74:04:26:a2:d1:55:8c:85:56:32:3c:b4:9a:ab:64:42:
         00:d1:7e:57:8f:2d:36:7a:7b:f6:48:b9:e7:51:5b:07:53:59:
         4f:df:21:0b:93:03:87:3b:99:4c:30:2d:75:cc:75:03:dd:7a:
         44:66:3e:51:a0:2a:54:70:d0:84:e2:44:e1:39:b4:33:71:5e:
         61:e6:ac:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 11:44:32 2026 by rpki-client