nanog mailing list archives

RE: RPKI adoption (was: Re: Corporate Identity Theft: Azuki, LLC -- AS13389, 216.179.128.0/17)


From: Michel Py <michel.py () tsisemi com>
Date: Thu, 15 Aug 2019 23:49:30 +0000

Hi John,

John Curran wrote :
Even so, we at ARIN are in the midst of a Board-directed review of the RPKI legal framework to see if any 
improvements can be made
<https://www.arin.net/vault/participate/meetings/reports/ARIN_43/PDF/PPM/curran_rpki.pdf>  – I will provide further 
updates once it is completed.

Thanks, we appreciate the effort.

That being said, something has to be done. I feel that the RPKI validation by ARIN is somehow useless. Why : because 
few download the TAL (at least in part because of the indemnisation clause).
Therefore, many networks that do RPKI validation do validate prefixes from the other 4 RIRs but not mine.
In simple words : why bother validating, if all of most of the networks that could block invalid prefixes don't, 
because the TAL agreement is not palatable.

I understand that ARIN has to deal with a legal system that makes things difficult, but OTOH I would like ARIN's RPKI 
validation to provide the same protection than the other RIRs, which it currently does not.

I created my ROAs, but I am not protected as well as an Org belonging to another RIR.

Michel


TSI Disclaimer:  This message and any files or text attached to it are intended only for the recipients named above and 
contain information that may be confidential or privileged. If you are not the intended recipient, you must not 
forward, copy, use or otherwise disclose this communication or the information contained herein. In the event you have 
received this message in error, please notify the sender immediately by replying to this message, and then delete all 
copies of it from your system. Thank you!...

Current thread: