RPKI TAs

Owen DeLong owen at delong.com
Mon Aug 3 18:31:55 UTC 2020



> On Aug 3, 2020, at 07:54 , Job Snijders <job at ntt.net> wrote:
> 
> On Mon, Aug 03, 2020 at 08:17:55AM -0500, John Kristoff wrote:
>> On Sun, 2 Aug 2020 18:52:11 +0000
>> Randy Bush <randy at psg.com> wrote:
>> 
>>> not to mention the ARIN stupidity
>> 
>> Notwithstanding the RPA, downloading ARIN's TAL is straightforward:
>> 
>> As documented here:
>> 
>>  <https://www.arin.net/resources/manage/rpki/tal/>
>> 
>> One can wget, curl, or whatever this:
>> 
>>  <https://www.arin.net/resources/manage/rpki/arin.tal>
> 
> I dunno, 'straightforward' to me would mean the ARIN TA is installed by
> default when you install a RPKI Cache Validator implementation, all
> without requiring lawyers well-versed in both your native language AND
> in the American legal system.

I was able to download it just now without any authentication, lawyers, contracts,
or anything else… What more is it you are asking for?

> I can do DNSSEC, RPKI ROV, Signify, Web PKIs like TLS - all without
> kludges. Here is a video (10 min) where I show how you can bootstrap a
> system from 0 to 100 without relying party agreements:
> https://www.youtube.com/watch?v=oBwAQep7Q7o

I just obtained the ARIN TAL without ever signing an RPA. What am I missing?

All I did was follow the URL John provided.

Owen




More information about the NANOG mailing list