<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Cynthia,<div class=""><br class=""></div><div class="">Thank you for sharing this, and for giving Krill a chance :)</div><div class=""><br class=""></div><div class="">So, it looks like rpkid from <a href="http://rpki.net" class="">rpki.net</a> introduced a version 2 identity exchange after RFC 8183 had been published and that ARIN supports this. This is odd because RFC 8183 itself is based on the original <a href="http://rpki.net" class="">rpki.net</a> implementation. And, in fact, I saw a message to the nanog list from someone who had issues getting their, presumable older version of, rpkid to work with the exchange.</div><div class=""><br class=""></div><div class="">I will take this up with ARIN. As chance will have it I will meet up with them this Friday. I will advise them to stick to the RFC. If an update to the format is needed then that should be discussed in the IETF first.</div><div class=""><br class=""></div><div class="">In the meantime, thank you! We can document this, and perhaps do some trickery of sorts if we must. But, I prefer that ARIN changes things. They can also polish off their xslt skills ;)</div><div class=""><br class=""></div><div class="">Tim<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On 5 Feb 2020, at 10:54, Cynthia Revström via RPKI <<a href="mailto:rpki@lists.nlnetlabs.nl" class="">rpki@lists.nlnetlabs.nl</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Hello,<div class=""></div><div class=""><br class=""></div><div class="">So there is a bit of a lack of documentation when it comes to the format of the "Up/Down Identity XML" file that ARIN wants when you are setting up Delegated RPKI and the format of the parent response from ARIN.</div><div class="">ARIN's XML files are not RFC8183 but rather something a bit odd that I had to craft by hand based on example files I found in old git repositories.</div><div class="">I mainly posted this in the case that someone else has a similar issue since well as I said, docs are lacking atm. (I have also brought it up with NLNetLabs so they can discuss it with ARIN)</div><div class=""><br class=""></div><div class="">When running `krillc parents myid` I got something in the format of:</div><div class=""><child_request xmlns="<a href="http://www.hactrn.net/uris/rpki/rpki-setup/" target="_blank" class="">http://www.hactrn.net/uris/rpki/rpki-setup/</a>" version="1" child_handle="QUL-4"><br class=""> <child_bpki_ta>MII...</child_bpki_ta><br class=""></child_request><br class=""></div><div class=""><br class=""></div><div class="">Where as ARIN seemingly wanted (and accepted) the format of:</div><div class=""><identity xmlns="<a href="http://www.hactrn.net/uris/rpki/myrpki/" target="_blank" class="">http://www.hactrn.net/uris/rpki/myrpki/</a>" version="2" handle="QUL-4"><br class=""> <bpki_ta>MII...</bpki_ta><br class=""></identity><br class=""></div><div class=""><br class=""></div><div class="">And the parent response had a similar issue, this is what I got from ARIN:</div><div class=""><parent xmlns="<a href="http://www.hactrn.net/uris/rpki/myrpki/" target="_blank" class="">http://www.hactrn.net/uris/rpki/myrpki/</a>"<br class=""> version="2"<br class=""> valid_until="2120-02-05T09:01:23Z"<br class=""> service_uri="<a href="http://updown.arin.net/ARIN/QUL-4" target="_blank" class="">http://updown.arin.net/ARIN/QUL-4</a>"<br class=""> parent_handle="ARIN"<br class=""> child_handle="QUL-4"><br class=""> <bpki_resource_ta><br class="">MII...<br class=""> </bpki_resource_ta><br class=""> <bpki_child_ta><br class="">MII...<br class=""> </bpki_child_ta><br class=""> <repository type="none"/><br class=""></parent><br class=""></div><div class=""><br class=""></div><div class="">Where as krill/RFC8183 wants the format of:</div><div class=""><parent_response xmlns="<a href="http://www.hactrn.net/uris/rpki/rpki-setup/" target="_blank" class="">http://www.hactrn.net/uris/rpki/rpki-setup/</a>"<br class=""> version="1"<br class=""> valid_until="2120-02-05T09:01:23Z"<br class=""> service_uri="<a href="http://updown.arin.net/ARIN/QUL-4" target="_blank" class="">http://updown.arin.net/ARIN/QUL-4</a>"<br class=""> parent_handle="ARIN"<br class=""> child_handle="QUL-4"><br class=""> <parent_bpki_ta><br class="">MII... <this is the bpki_resource_ta tag from the ARIN format><br class=""> </parent_bpki_ta><br class=""></parent_response><br class=""></div><div class=""><br class=""></div><div class="">- Cynthia</div></div>
-- <br class="">RPKI mailing list<br class=""><a href="mailto:RPKI@lists.nlnetlabs.nl" class="">RPKI@lists.nlnetlabs.nl</a><br class="">https://lists.nlnetlabs.nl/mailman/listinfo/rpki<br class=""></div></blockquote></div><br class=""></div></body></html>