Reaching out to ARIN members about their RPKI INVALID prefixes

Tue Sep 18 21:35:44 UTC 2018

> 
> "rir says owen can originate route FOO"
> "ROA for 157.130.1.0/24 <http://157.130.1.0/24> says OWEN can originate"
> 

Nope… ROA says (e.g.) AS1734 (or anyone willing to impersonate AS1734)  can originate 192.159.10.0/24.

> those seem like valuable pieces of information. Especially since I can know this through some machine parseable fashion.

I would agree if you had some way to distinguish AS1734 originating FOO from AS174 originating FOO with a prepend of AS1734.

Owen

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20180918/207b32a3/attachment.html>