nanog mailing list archives

Re: RPKI TAs


From: Owen DeLong <owen () delong com>
Date: Mon, 3 Aug 2020 11:31:55 -0700



On Aug 3, 2020, at 07:54 , Job Snijders <job () ntt net> wrote:

On Mon, Aug 03, 2020 at 08:17:55AM -0500, John Kristoff wrote:
On Sun, 2 Aug 2020 18:52:11 +0000
Randy Bush <randy () psg com> wrote:

not to mention the ARIN stupidity

Notwithstanding the RPA, downloading ARIN's TAL is straightforward:

As documented here:

 <https://www.arin.net/resources/manage/rpki/tal/>

One can wget, curl, or whatever this:

 <https://www.arin.net/resources/manage/rpki/arin.tal>

I dunno, 'straightforward' to me would mean the ARIN TA is installed by
default when you install a RPKI Cache Validator implementation, all
without requiring lawyers well-versed in both your native language AND
in the American legal system.

I was able to download it just now without any authentication, lawyers, contracts,
or anything elseā€¦ What more is it you are asking for?

I can do DNSSEC, RPKI ROV, Signify, Web PKIs like TLS - all without
kludges. Here is a video (10 min) where I show how you can bootstrap a
system from 0 to 100 without relying party agreements:
https://www.youtube.com/watch?v=oBwAQep7Q7o

I just obtained the ARIN TAL without ever signing an RPA. What am I missing?

All I did was follow the URL John provided.

Owen


Current thread: