Re: Has Anyone managed to get Delegated RPKI working with ARIN

2020-04-02 Thread Alex Band
Final update: On April 1st ARIN deployed support for the RFC 8183 RPKI key exchange format: https://www.arin.net/vault/participate/acsp/suggestions/2020-3.html You will no longer need the “ARIN Compatible" toggle in Krill as described in the previous email. The toggle will be removed in version

Re: Has Anyone managed to get Delegated RPKI working with ARIN

2020-02-25 Thread Alex Band
An update: The setup process with ARIN has now been fixed in Krill 0.5.0, which was just released: https://www.nlnetlabs.nl/news/2020/Feb/25/krill.0.5.0-released/ We have worked around the issue by transforming the child request XML file in the user interface using a toggle: https://rpki.readth

Re: Has Anyone managed to get Delegated RPKI working with ARIN

2020-02-13 Thread Alex Band
Hi there! There is also this somewhat hacky SED command to transform the Request XML into the format that ARIN accepts, in case you’d like to use something other than the XSL: https://sed.js.org/?gist=3f08fb293c8825855bb26f2865161575 –– Looping in John Curran John, I appreciate ARIN has accep

Re: Has Anyone managed to get Delegated RPKI working with ARIN

2020-02-05 Thread Tim Bruijnzeels
Hi, Everyone is welcome to read that list of course, but the TL;DR is: ARIN currently uses a pre RFC 8183 format for the identity exchange. It would be good if this were updated. New versions of rpkid as well as Krill have issues with the old format. In the meantime this XSL provided by rpki.n

Re: Has Anyone managed to get Delegated RPKI working with ARIN

2020-02-05 Thread Christopher Munz-Michielin
Brilliant! Thanks for the write up Cynthia, I'll have a read through! Chris On 2020-02-05 1:56 a.m., Cynthia Revström wrote: (Re-sent as I forgot to include the ML the first time, oops) Hi Chris, I recently figured it out and posted it on the NLNetLabs RPKI mailing list. https://lists.nlnetla

Re: Has Anyone managed to get Delegated RPKI working with ARIN

2020-02-05 Thread Randy Bush
> I recently figured it out and posted it on the NLNetLabs RPKI mailing list. > https://lists.nlnetlabs.nl/pipermail/rpki/2020-February/000124.html nice. thank you. randy

Re: Has Anyone managed to get Delegated RPKI working with ARIN

2020-02-05 Thread Cynthia Revström
(Re-sent as I forgot to include the ML the first time, oops) Hi Chris, I recently figured it out and posted it on the NLNetLabs RPKI mailing list. https://lists.nlnetlabs.nl/pipermail/rpki/2020-February/000124.html I hope it helps :) - Cynthia On Wed, Jan 29, 2020 at 6:31 PM Christopher Munz-Mic

Has Anyone managed to get Delegated RPKI working with ARIN

2020-01-29 Thread Christopher Munz-Michielin
Hi Nanog, Posting here since my Google-fu is coming up short.  I'm trying to setup delegated RPKI in ARIN using rpki.net's rpkid Python daemon and am running into an issue submitting the identity file to ARIN's control panel. The same file submitted to RIPE's  test environment at https://local