On Aug 3, 2020, at 07:54 , Job Snijders <job@ntt.net> wrote:
On Mon, Aug 03, 2020 at 08:17:55AM -0500, John Kristoff wrote:
On Sun, 2 Aug 2020 18:52:11 +0000 Randy Bush <randy@psg.com> wrote:
not to mention the ARIN stupidity
Notwithstanding the RPA, downloading ARIN's TAL is straightforward:
As documented here:
<https://www.arin.net/resources/manage/rpki/tal/>
One can wget, curl, or whatever this:
I dunno, 'straightforward' to me would mean the ARIN TA is installed by default when you install a RPKI Cache Validator implementation, all without requiring lawyers well-versed in both your native language AND in the American legal system.
I was able to download it just now without any authentication, lawyers, contracts, or anything else… What more is it you are asking for?
I can do DNSSEC, RPKI ROV, Signify, Web PKIs like TLS - all without kludges. Here is a video (10 min) where I show how you can bootstrap a system from 0 to 100 without relying party agreements: https://www.youtube.com/watch?v=oBwAQep7Q7o
I just obtained the ARIN TAL without ever signing an RPA. What am I missing? All I did was follow the URL John provided. Owen