From mjoseph at google.com  Fri Jan  2 20:24:40 2015
From: mjoseph at google.com (Mike Joseph)
Date: Fri, 2 Jan 2015 17:24:40 -0800
Subject: [arin-tech-discuss] Orphaned Customer records
Message-ID: <CAPDshkbu-zem0yFmVPyuf_bkJT9mkrUdi=NUFjdnp_WLjM71vg@mail.gmail.com>

Hey folks,

I have a few questions about Customer records in the ARIN DB and how
orphaned ones are handled.  Specifically, I'm asking about Customer records
in the following situations:

   - Customer record created (POST /rest/net/PARENTNETHANDLE/customer) but
   no reassignment made
   - Simple reassignment deleted (DELETE /rest/net/NETHANDLE) *without*
   explicit deletion of the customer record (DELETE
   /rest/customer/CUSTOMERHANDLE)

I know that the documentation admonishes developers not to get into this
situation and to be fastidious about cleaning up Customer records, but of
course it can happen.  And I've tested in both scenarios (knowing the
Customer record ID #) that the record persists at least for a while.

So, my questions are:

   1. What happens to these orphaned records?
   2. Does ARIN make any effort to remove them?
   3. If I wanted to clean ours up, how would I even find them?  I can't
   find an API call to find Customer records by NET.

Thanks.

-MJ

-- 

Mike Joseph | Manager, Sustaining Engineering & Operations |
mjoseph at google.com | +1-650-214-4543
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150102/5e025755/attachment.html>

From andy at arin.net  Mon Jan  5 10:46:16 2015
From: andy at arin.net (Andy Newton)
Date: Mon, 5 Jan 2015 15:46:16 +0000
Subject: [arin-tech-discuss] Orphaned Customer records
In-Reply-To: <CAPDshkbu-zem0yFmVPyuf_bkJT9mkrUdi=NUFjdnp_WLjM71vg@mail.gmail.com>
References: <CAPDshkbu-zem0yFmVPyuf_bkJT9mkrUdi=NUFjdnp_WLjM71vg@mail.gmail.com>
Message-ID: <C78CBDD2-EE7B-4BD1-92DB-57BA27109ECF@arin.net>

Mike,

We have no regular processes to delete orphaned customer records. In our analysis of the growth of our data set, orphaned records do not constitute an area of excessive growth and therefore instituting a regular process to purge them has not been implemented.

Once unlinked from a network, a customer record cannot be easily found except for by a lookup of its handle. There is no API function to list orphaned records.

I hope that answers your questions.

Andy Newton,
ARIN

On Jan 2, 2015, at 8:24 PM, Mike Joseph <mjoseph at google.com<mailto:mjoseph at google.com>> wrote:

Hey folks,

I have a few questions about Customer records in the ARIN DB and how orphaned ones are handled.  Specifically, I'm asking about Customer records in the following situations:

  *   Customer record created (POST /rest/net/PARENTNETHANDLE/customer) but no reassignment made
  *   Simple reassignment deleted (DELETE /rest/net/NETHANDLE) without explicit deletion of the customer record (DELETE /rest/customer/CUSTOMERHANDLE)

I know that the documentation admonishes developers not to get into this situation and to be fastidious about cleaning up Customer records, but of course it can happen.  And I've tested in both scenarios (knowing the Customer record ID #) that the record persists at least for a while.

So, my questions are:

  1.  What happens to these orphaned records?
  2.  Does ARIN make any effort to remove them?
  3.  If I wanted to clean ours up, how would I even find them?  I can't find an API call to find Customer records by NET.

Thanks.

-MJ

--

Mike Joseph |    Manager, Sustaining Engineering & Operations |  mjoseph at google.com<mailto:mjoseph at google.com> |         +1-650-214-4543

_______________________________________________
arin-tech-discuss mailing list
arin-tech-discuss at arin.net<mailto:arin-tech-discuss at arin.net>
http://lists.arin.net/mailman/listinfo/arin-tech-discuss

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150105/ef277a8a/attachment.html>

From Sean.Zhao at CenturyLink.com  Mon Jan  5 10:51:05 2015
From: Sean.Zhao at CenturyLink.com (Zhao, Sean)
Date: Mon, 5 Jan 2015 15:51:05 +0000
Subject: [arin-tech-discuss] Do you have any doc for Nets payload?
Message-ID: <C4D5F96B55BE8B43AB4BBB7EACB706ED64A9F66F@PDDCWMBXEX504.ctl.intranet>

Hello
                I visited https://www.arin.net/resources/restfulpayloads.html. I have seen Net, Netblock schema. But I cannot find Nets payload. Would  you please help me out there?

Thanks

Sean Zhao
sean.zhao at centurylink.com

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150105/8c28cb4f/attachment.html>

From Sean.Zhao at CenturyLink.com  Mon Jan  5 14:49:54 2015
From: Sean.Zhao at CenturyLink.com (Zhao, Sean)
Date: Mon, 5 Jan 2015 19:49:54 +0000
Subject: [arin-tech-discuss] Is http://whois.ote.arin.net/rest down
	(01/05/2015 afternoon)?
Message-ID: <C4D5F96B55BE8B43AB4BBB7EACB706ED64A9F780@PDDCWMBXEX504.ctl.intranet>

Hi,
                I am trying to get information from ote site with the url like this http://whois.ote.arin.net/rest/orgs;name=CITY%20BIBLE%20CHURCH. It worked this morning. But not now. Is the server down? Just trying to verify it. Thanks!!



Thanks

Sean Zhao
sean.zhao at centurylink.com

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150105/27e4e1d2/attachment.html>

From sscally at arin.net  Mon Jan  5 15:06:11 2015
From: sscally at arin.net (Steve Scally)
Date: Mon, 5 Jan 2015 15:06:11 -0500
Subject: [arin-tech-discuss] Is http://whois.ote.arin.net/rest down
 (01/05/2015 afternoon)?
In-Reply-To: <C4D5F96B55BE8B43AB4BBB7EACB706ED64A9F780@PDDCWMBXEX504.ctl.intranet>
References: <C4D5F96B55BE8B43AB4BBB7EACB706ED64A9F780@PDDCWMBXEX504.ctl.intranet>
Message-ID: <etPan.54aaeef0.6b8b4567.11a3b@Combat-Carl.local>

Sean,

Today is the first Monday of the month which is the normally scheduled maintenance window for refreshing the database data. ?I will send a follow up email when the maintenance has been completed.

Steve


On January 5, 2015 at 2:50:15 PM, Zhao, Sean (sean.zhao at centurylink.com) wrote:

Hi,

??????????????? I am trying to get information from ote site with the url like this http://whois.ote.arin.net/rest/orgs;name=CITY%20BIBLE%20CHURCH. It worked this morning. But not now. Is the server down? Just trying to verify it. Thanks!!

?

?

?

Thanks

?

Sean Zhao

sean.zhao at centurylink.com

?

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
_______________________________________________  
arin-tech-discuss mailing list  
arin-tech-discuss at arin.net  
http://lists.arin.net/mailman/listinfo/arin-tech-discuss  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150105/3d481022/attachment.html>

From Sean.Zhao at CenturyLink.com  Mon Jan  5 15:25:45 2015
From: Sean.Zhao at CenturyLink.com (Zhao, Sean)
Date: Mon, 5 Jan 2015 20:25:45 +0000
Subject: [arin-tech-discuss] Is http://whois.ote.arin.net/rest down
 (01/05/2015 afternoon)?
Message-ID: <C4D5F96B55BE8B43AB4BBB7EACB706ED64A9F7AF@PDDCWMBXEX504.ctl.intranet>

Thanks for your response, Steve!!

Thanks

Sean Zhao
sean.zhao at centurylink.com

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150105/c6d0c773/attachment.html>

From sscally at arin.net  Mon Jan  5 23:42:27 2015
From: sscally at arin.net (Steve Scally)
Date: Mon, 5 Jan 2015 23:42:27 -0500
Subject: [arin-tech-discuss] OT&E January 2015 Monthly Scheduled Maintenance
	: Completed
Message-ID: <etPan.54ab67ef.6b8b4567.321f@Combat-Carl.local>

Sean / All,

The OT&E environment has been updated successfully and is back online.?

Steve
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150105/71857180/attachment.html>

From Sean.Zhao at CenturyLink.com  Fri Jan  9 10:30:42 2015
From: Sean.Zhao at CenturyLink.com (Zhao, Sean)
Date: Fri, 9 Jan 2015 15:30:42 +0000
Subject: [arin-tech-discuss] Do you have any doc for Nets payload?
Message-ID: <C4D5F96B55BE8B43AB4BBB7EACB706ED64AA10AA@PDDCWMBXEX504.ctl.intranet>

Hi, again
                Since I have not got any response. I used http://whois.ote.arin.net/rest/cidr/65.127.10.160/29/more to get the xml from Arin's RESTful server. I got this <nets>
<?xml version='1.0'?>
<?xml-stylesheet type='text/xsl' href='http://whois.arin.net/xsl/website.xsl' ?>
<nets xmlns="http://www.arin.net/whoisrws/core/v1"
xmlns:ns2="http://www.arin.net/whoisrws/rdns/v1"
xmlns:ns3="http://www.arin.net/whoisrws/netref/v2"
termsOfUse=https://www.arin.net/whois_tou.html inaccuracyReportUrl="http://www.arin.net/public/whoisinaccuracy/index.xhtml">
<limitExceeded limit="256">false</limitExceeded>
<netRef startAddress="65.127.10.176"
endAddress="65.127.10.183"
name="Q0818-65-127-10-176"
handle="NET-65-127-10-176-1">
http://whois.ote.arin.net/rest/net/NET-65-127-10-176-1
</netRef>
<netRef startAddress="65.127.10.168"
endAddress="65.127.10.175"
name="Q0820-65-127-10-168"
handle="NET-65-127-10-168-1">
http://whois.ote.arin.net/rest/net/NET-65-127-10-168-1
</netRef>
</nets>

Just need to confirm that this is the correct response. The list of netRef can be null if there is no 65.127.10.160/29 in Arin's DB. Correct? Do I miss any other elements?. Just need to make sure that I won't get the code crash if there is new element showing up in <nets>. I will appreciate if I can get any response from you.



Thanks

Sean Zhao
sean.zhao at centurylink.com

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150109/23f59e4e/attachment.html>

From Sean.Zhao at CenturyLink.com  Mon Jan 12 11:45:11 2015
From: Sean.Zhao at CenturyLink.com (Zhao, Sean)
Date: Mon, 12 Jan 2015 16:45:11 +0000
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized means?
Message-ID: <C4D5F96B55BE8B43AB4BBB7EACB706ED64AA24DB@PDDCWMBXEX504.ctl.intranet>

Hi,
                I was trying to swip an ip 198.36.189.64/29. I was expecting an error return from Arin because this ip has been assigned already. But when I was trying to assign this ip, the error message I got from Arin is
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1">
<additionalInfo/><code>E_AUTHENTICATION</code>
<components/>
<message>The API key is not authorized to make that request.</message>
</error>

Somehow that does not make sense to me because this was assigned by me last week. That means I do have good APIKEY. I am trying to work on the error handling. So I am expecting to get error like "this ip has been assigned already" or "overlaps with existing network(s)".

Thanks

Sean Zhao
sean.zhao at centurylink.com

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150112/003bdb7e/attachment.html>

From andy at arin.net  Mon Jan 12 17:24:13 2015
From: andy at arin.net (Andy Newton)
Date: Mon, 12 Jan 2015 22:24:13 +0000
Subject: [arin-tech-discuss] Do you have any doc for Nets payload?
In-Reply-To: <C4D5F96B55BE8B43AB4BBB7EACB706ED64AA10AA@PDDCWMBXEX504.ctl.intranet>
References: <C4D5F96B55BE8B43AB4BBB7EACB706ED64AA10AA@PDDCWMBXEX504.ctl.intranet>
Message-ID: <A734722E-23F8-4CBB-972D-1C5C45B14C36@arin.net>


On Jan 9, 2015, at 10:30 AM, Zhao, Sean <Sean.Zhao at CenturyLink.com<mailto:Sean.Zhao at CenturyLink.com>> wrote:

Hi, again
                Since I have not got any response. I used http://whois.ote.arin.net/rest/cidr/65.127.10.160/29/more to get the xml from Arin?s RESTful server. I got this <nets>
<?xml version='1.0'?>
<?xml-stylesheet type='text/xsl' href='http://whois.arin.net/xsl/website.xsl' ?>
<nets xmlns="http://www.arin.net/whoisrws/core/v1"
xmlns:ns2="http://www.arin.net/whoisrws/rdns/v1"
xmlns:ns3="http://www.arin.net/whoisrws/netref/v2"
termsOfUse=https://www.arin.net/whois_tou.htmlinaccuracyReportUrl="http://www.arin.net/public/whoisinaccuracy/index.xhtml">
<limitExceeded limit="256">false</limitExceeded>
<netRef startAddress="65.127.10.176"
endAddress="65.127.10.183"
name="Q0818-65-127-10-176"
handle="NET-65-127-10-176-1">
http://whois.ote.arin.net/rest/net/NET-65-127-10-176-1
</netRef>
<netRef startAddress="65.127.10.168"
endAddress="65.127.10.175"
name="Q0820-65-127-10-168"
handle="NET-65-127-10-168-1">
http://whois.ote.arin.net/rest/net/NET-65-127-10-168-1
</netRef>
</nets>

Just need to confirm that this is the correct response. The list of netRef can be null if there is no 65.127.10.160/29 in Arin?s DB. Correct? Do I miss any other elements?. Just need to make sure that I won?t get the code crash if there is new element showing up in <nets>. I will appreciate if I can get any response from you.


Sean,

The list will not contain any netRef elements if there are no records matching the query.

However, your program should account for a scenario where new elements may show up. Our XML schema is extensible, and we do add new elements from time to time.  In general, it is good practice to ignore unknown elements and names in both XML and JSON.

The schemas for Whois-RWS can be found here: Whois-RWS Schema (ZIP format)<https://www.arin.net/resources/whoisrws/whoisrws-relaxng-compact-schemas.zip>

I hope this answers your question.

Andy Newton,
Chief Engineer, ARIN




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150112/51345d68/attachment.html>

From jonw at arin.net  Mon Jan 12 17:42:59 2015
From: jonw at arin.net (Jon Worley)
Date: Mon, 12 Jan 2015 22:42:59 +0000
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized
 means?
Message-ID: <D0D9B7E0.6C27F%jonw@arin.net>

Hello Sean,

Can you please send the payload/URL to us via Ask ARIN?  It?s difficult for us to give you an exact answer without looking at the full context.

If you have any further questions, comments, or concerns please respond to this message or contact me directly.

Regards,

Jon Worley
Principal Technical Analyst
ARIN Registration Services
https://www.arin.net/
hostmaster at arin.net
703.227.0660

From: <Zhao>, Sean <Sean.Zhao at CenturyLink.com<mailto:Sean.Zhao at CenturyLink.com>>
Date: Monday, January 12, 2015 at 11:45 AM
To: "'arin-tech-discuss at arin.net<mailto:'arin-tech-discuss at arin.net>'" <arin-tech-discuss at arin.net<mailto:arin-tech-discuss at arin.net>>
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Hi,
                I was trying to swip an ip 198.36.189.64/29. I was expecting an error return from Arin because this ip has been assigned already. But when I was trying to assign this ip, the error message I got from Arin is
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1">
<additionalInfo/><code>E_AUTHENTICATION</code>
<components/>
<message>The API key is not authorized to make that request.</message>
</error>

Somehow that does not make sense to me because this was assigned by me last week. That means I do have good APIKEY. I am trying to work on the error handling. So I am expecting to get error like ?this ip has been assigned already? or ?overlaps with existing network(s)?.

Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150112/b3a0fd6d/attachment.html>

From Sean.Zhao at CenturyLink.com  Tue Jan 13 09:35:52 2015
From: Sean.Zhao at CenturyLink.com (Zhao, Sean)
Date: Tue, 13 Jan 2015 14:35:52 +0000
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized
 means?
In-Reply-To: <D0D9B7E0.6C27F%jonw@arin.net>
References: <D0D9B7E0.6C27F%jonw@arin.net>
Message-ID: <C4D5F96B55BE8B43AB4BBB7EACB706ED64AA27BC@PDDCWMBXEX504.ctl.intranet>

Yes
url: https://www.ote.arin.net/rest/net/NET-198-36-189-64-1/reassign?apikey=MY-API-KEY
method is PUT
payload is

<?xml version="1.0" encoding="UTF-8"?>

<net xmlns="http://www.arin.net/regrws/core/v1">
  <netBlocks>
    <netBlock>
      <cidrLength>29</cidrLength>
      <startAddress>198.36.189.64</startAddress>
      <type>S</type>
    </netBlock>
  </netBlocks>
  <netName>Q0113-198-36-189-64</netName>
  <orgHandle>CBC-208</orgHandle>
  <originASes>
    <originAS>209</originAS>
  </originASes>
  <parentNetHandle>NET-198-36-189-64-1</parentNetHandle>
  <version>4</version>
</net>

Response code is 401
Response message is Unauthorized
The xml returned by Arin is

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1">
<additionalInfo/>
<code>E_AUTHENTICATION</code>
<components/>
<message>The API key is not authorized to make that request.</message>
</error>



Thanks

Sean Zhao
sean.zhao at centurylink.com

From: Jon Worley [mailto:jonw at arin.net]
Sent: Monday, January 12, 2015 5:43 PM
To: Zhao, Sean; 'arin-tech-discuss at arin.net'
Subject: Re: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Hello Sean,

Can you please send the payload/URL to us via Ask ARIN?  It's difficult for us to give you an exact answer without looking at the full context.

If you have any further questions, comments, or concerns please respond to this message or contact me directly.

Regards,

Jon Worley
Principal Technical Analyst
ARIN Registration Services
https://www.arin.net/
hostmaster at arin.net<mailto:hostmaster at arin.net>
703.227.0660

From: <Zhao>, Sean <Sean.Zhao at CenturyLink.com<mailto:Sean.Zhao at CenturyLink.com>>
Date: Monday, January 12, 2015 at 11:45 AM
To: "'arin-tech-discuss at arin.net<mailto:'arin-tech-discuss at arin.net>'" <arin-tech-discuss at arin.net<mailto:arin-tech-discuss at arin.net>>
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Hi,
                I was trying to swip an ip 198.36.189.64/29. I was expecting an error return from Arin because this ip has been assigned already. But when I was trying to assign this ip, the error message I got from Arin is
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1"<http://www.arin.net/regrws/core/v1%22>>
<additionalInfo/><code>E_AUTHENTICATION</code>
<components/>
<message>The API key is not authorized to make that request.</message>
</error>

Somehow that does not make sense to me because this was assigned by me last week. That means I do have good APIKEY. I am trying to work on the error handling. So I am expecting to get error like "this ip has been assigned already" or "overlaps with existing network(s)".

Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150113/387c99cb/attachment.html>

From Sean.Zhao at CenturyLink.com  Mon Jan 19 09:39:05 2015
From: Sean.Zhao at CenturyLink.com (Zhao, Sean)
Date: Mon, 19 Jan 2015 14:39:05 +0000
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized
 means?
In-Reply-To: <C4D5F96B55BE8B43AB4BBB7EACB706ED64AA27B8@PDDCWMBXEX504.ctl.intranet>
References: <D0D9B7E0.6C27F%jonw@arin.net>
	<C4D5F96B55BE8B43AB4BBB7EACB706ED64AA27B8@PDDCWMBXEX504.ctl.intranet>
Message-ID: <C4D5F96B55BE8B43AB4BBB7EACB706ED64AA34B6@PDDCWMBXEX504.ctl.intranet>

Just wonder if there is any luck there?

Thanks

Sean Zhao
sean.zhao at centurylink.com

From: Zhao, Sean
Sent: Tuesday, January 13, 2015 9:36 AM
To: 'Jon Worley'; 'arin-tech-discuss at arin.net'
Subject: RE: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Yes
url: https://www.ote.arin.net/rest/net/NET-198-36-189-64-1/reassign?apikey=MY-API-KEY
method is PUT
payload is

<?xml version="1.0" encoding="UTF-8"?>

<net xmlns="http://www.arin.net/regrws/core/v1">
  <netBlocks>
    <netBlock>
      <cidrLength>29</cidrLength>
      <startAddress>198.36.189.64</startAddress>
      <type>S</type>
    </netBlock>
  </netBlocks>
  <netName>Q0113-198-36-189-64</netName>
  <orgHandle>CBC-208</orgHandle>
  <originASes>
    <originAS>209</originAS>
  </originASes>
  <parentNetHandle>NET-198-36-189-64-1</parentNetHandle>
  <version>4</version>
</net>

Response code is 401
Response message is Unauthorized
The xml returned by Arin is

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1">
<additionalInfo/>
<code>E_AUTHENTICATION</code>
<components/>
<message>The API key is not authorized to make that request.</message>
</error>



Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

From: Jon Worley [mailto:jonw at arin.net]
Sent: Monday, January 12, 2015 5:43 PM
To: Zhao, Sean; 'arin-tech-discuss at arin.net'
Subject: Re: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Hello Sean,

Can you please send the payload/URL to us via Ask ARIN?  It's difficult for us to give you an exact answer without looking at the full context.

If you have any further questions, comments, or concerns please respond to this message or contact me directly.

Regards,

Jon Worley
Principal Technical Analyst
ARIN Registration Services
https://www.arin.net/
hostmaster at arin.net<mailto:hostmaster at arin.net>
703.227.0660

From: <Zhao>, Sean <Sean.Zhao at CenturyLink.com<mailto:Sean.Zhao at CenturyLink.com>>
Date: Monday, January 12, 2015 at 11:45 AM
To: "'arin-tech-discuss at arin.net<mailto:'arin-tech-discuss at arin.net>'" <arin-tech-discuss at arin.net<mailto:arin-tech-discuss at arin.net>>
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Hi,
                I was trying to swip an ip 198.36.189.64/29. I was expecting an error return from Arin because this ip has been assigned already. But when I was trying to assign this ip, the error message I got from Arin is
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1"<http://www.arin.net/regrws/core/v1%22>>
<additionalInfo/><code>E_AUTHENTICATION</code>
<components/>
<message>The API key is not authorized to make that request.</message>
</error>

Somehow that does not make sense to me because this was assigned by me last week. That means I do have good APIKEY. I am trying to work on the error handling. So I am expecting to get error like "this ip has been assigned already" or "overlaps with existing network(s)".

Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150119/aaf6f3fa/attachment.html>

From gdubin at arin.net  Mon Jan 19 10:49:26 2015
From: gdubin at arin.net (Garth Dubin)
Date: Mon, 19 Jan 2015 15:49:26 +0000
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized
 means?
In-Reply-To: <C4D5F96B55BE8B43AB4BBB7EACB706ED64AA34B6@PDDCWMBXEX504.ctl.intranet>
References: <D0D9B7E0.6C27F%jonw@arin.net>
	<C4D5F96B55BE8B43AB4BBB7EACB706ED64AA27B8@PDDCWMBXEX504.ctl.intranet>,
	<C4D5F96B55BE8B43AB4BBB7EACB706ED64AA34B6@PDDCWMBXEX504.ctl.intranet>
Message-ID: <DFE5D183A6C0674CAA396904EA24ED2E01118984AB@CHAMBX01.corp.arin.net>

Sean,

The authorization scheme currently just verifies whether you have permission to reassign the specified block.  Since it's already been reassigned to another organization, you technically do not have permission to reassign it again.  If you want to reassign it to a new party, you'd have to delete the existing reassignment and perform the reassign call again.

As for the error handling, I see your point and we can investigate how to make the messaging more detailed in a future release.  Please file an ACSP regarding the error messaging in the registration system so that we can track this request and prioritize along with other suggested improvements.  The form can be found here:

https://www.arin.net/public/acsp/index.xhtml

Regards,

Garth Dubin
Software Integration Manager

________________________________
From: arin-tech-discuss-bounces at arin.net [arin-tech-discuss-bounces at arin.net] on behalf of Zhao, Sean [Sean.Zhao at CenturyLink.com]
Sent: Monday, January 19, 2015 9:39 AM
To: Zhao, Sean; Jon Worley; 'arin-tech-discuss at arin.net'
Subject: Re: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Just wonder if there is any luck there?

Thanks

Sean Zhao
sean.zhao at centurylink.com

From: Zhao, Sean
Sent: Tuesday, January 13, 2015 9:36 AM
To: 'Jon Worley'; 'arin-tech-discuss at arin.net'
Subject: RE: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Yes
url: https://www.ote.arin.net/rest/net/NET-198-36-189-64-1/reassign?apikey=MY-API-KEY
method is PUT
payload is

<?xml version="1.0" encoding="UTF-8"?>

<net xmlns="http://www.arin.net/regrws/core/v1">
  <netBlocks>
    <netBlock>
      <cidrLength>29</cidrLength>
      <startAddress>198.36.189.64</startAddress>
      <type>S</type>
    </netBlock>
  </netBlocks>
  <netName>Q0113-198-36-189-64</netName>
  <orgHandle>CBC-208</orgHandle>
  <originASes>
    <originAS>209</originAS>
  </originASes>
  <parentNetHandle>NET-198-36-189-64-1</parentNetHandle>
  <version>4</version>
</net>

Response code is 401
Response message is Unauthorized
The xml returned by Arin is

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1">
<additionalInfo/>
<code>E_AUTHENTICATION</code>
<components/>
<message>The API key is not authorized to make that request.</message>
</error>



Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

From: Jon Worley [mailto:jonw at arin.net]
Sent: Monday, January 12, 2015 5:43 PM
To: Zhao, Sean; 'arin-tech-discuss at arin.net'
Subject: Re: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Hello Sean,

Can you please send the payload/URL to us via Ask ARIN?  It?s difficult for us to give you an exact answer without looking at the full context.

If you have any further questions, comments, or concerns please respond to this message or contact me directly.

Regards,

Jon Worley
Principal Technical Analyst
ARIN Registration Services
https://www.arin.net/
hostmaster at arin.net<mailto:hostmaster at arin.net>
703.227.0660

From: <Zhao>, Sean <Sean.Zhao at CenturyLink.com<mailto:Sean.Zhao at CenturyLink.com>>
Date: Monday, January 12, 2015 at 11:45 AM
To: "'arin-tech-discuss at arin.net<mailto:'arin-tech-discuss at arin.net>'" <arin-tech-discuss at arin.net<mailto:arin-tech-discuss at arin.net>>
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Hi,
                I was trying to swip an ip 198.36.189.64/29. I was expecting an error return from Arin because this ip has been assigned already. But when I was trying to assign this ip, the error message I got from Arin is
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1"<http://www.arin.net/regrws/core/v1%22>>
<additionalInfo/><code>E_AUTHENTICATION</code>
<components/>
<message>The API key is not authorized to make that request.</message>
</error>

Somehow that does not make sense to me because this was assigned by me last week. That means I do have good APIKEY. I am trying to work on the error handling. So I am expecting to get error like ?this ip has been assigned already? or ?overlaps with existing network(s)?.

Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150119/3d94cf75/attachment.html>

From Sean.Zhao at CenturyLink.com  Mon Jan 19 11:10:57 2015
From: Sean.Zhao at CenturyLink.com (Zhao, Sean)
Date: Mon, 19 Jan 2015 16:10:57 +0000
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized
 means?
In-Reply-To: <DFE5D183A6C0674CAA396904EA24ED2E01118984AB@CHAMBX01.corp.arin.net>
References: <D0D9B7E0.6C27F%jonw@arin.net>
	<C4D5F96B55BE8B43AB4BBB7EACB706ED64AA27B8@PDDCWMBXEX504.ctl.intranet>,
	<C4D5F96B55BE8B43AB4BBB7EACB706ED64AA34B6@PDDCWMBXEX504.ctl.intranet>
	<DFE5D183A6C0674CAA396904EA24ED2E01118984AB@CHAMBX01.corp.arin.net>
Message-ID: <C4D5F96B55BE8B43AB4BBB7EACB706ED64AA3535@PDDCWMBXEX504.ctl.intranet>

Thanks Garth!!

                If this is the reason, I have one more question regarding the same issue.

                I try to assign https://www.ote.arin.net/rest/net/NET-65-112-0-0-1/reassign?apikey=MYAPIKEY. Payload is
<net xmlns="http://www.arin.net/regrws/core/v1">
  <netBlocks>
    <netBlock>
      <cidrLength>27</cidrLength>
      <startAddress>65.127.10.160</startAddress>
      <type>S</type>
    </netBlock>
  </netBlocks>
  <netName>Q0119-65-127-10-160</netName>
  <orgHandle>CBC-208</orgHandle>
  <originASes>
    <originAS>209</originAS>
  </originASes>
  <parentNetHandle>NET-65-112-0-0-1</parentNetHandle>
  <version>4</version>
</net>

                It is exactly same case as I tried to assign 198.36.189.64/29 before, except the ip and mask no are different. I should get same "The API key is not authorized to make that request." , Response code is 401,Response message is Unauthorized.
But instead I got,

Response code is 400,
Response message : Bad Request
And response xml from Arin
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1">
<add  itionalInfo/><code>E_ENTITY_VALIDATION</code>
<components>
<component>
<message>IP range overlaps with existing network(s).</message>
<name>startAddress</nam  e>
</component>
</components>
<message>Payload entity failed to validate; see component messages for details.</message>
</error>

They both, 65.127.10.160/27 and 198.36.189.64/29 are assigned to CBC-208. And I tried to assign both netBlocks to another company wrongly. I should get same error messages for both transaction. Correct?

Thanks

Sean Zhao
sean.zhao at centurylink.com

From: Garth Dubin [mailto:gdubin at arin.net]
Sent: Monday, January 19, 2015 10:49 AM
To: Zhao, Sean; 'arin-tech-discuss at arin.net'
Subject: RE: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Sean,

The authorization scheme currently just verifies whether you have permission to reassign the specified block.  Since it's already been reassigned to another organization, you technically do not have permission to reassign it again.  If you want to reassign it to a new party, you'd have to delete the existing reassignment and perform the reassign call again.

As for the error handling, I see your point and we can investigate how to make the messaging more detailed in a future release.  Please file an ACSP regarding the error messaging in the registration system so that we can track this request and prioritize along with other suggested improvements.  The form can be found here:

https://www.arin.net/public/acsp/index.xhtml

Regards,

Garth Dubin
Software Integration Manager

________________________________
From: arin-tech-discuss-bounces at arin.net<mailto:arin-tech-discuss-bounces at arin.net> [arin-tech-discuss-bounces at arin.net] on behalf of Zhao, Sean [Sean.Zhao at CenturyLink.com]
Sent: Monday, January 19, 2015 9:39 AM
To: Zhao, Sean; Jon Worley; 'arin-tech-discuss at arin.net'
Subject: Re: [arin-tech-discuss] Would anybody explain what Unauthorized means?
Just wonder if there is any luck there?

Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

From: Zhao, Sean
Sent: Tuesday, January 13, 2015 9:36 AM
To: 'Jon Worley'; 'arin-tech-discuss at arin.net'
Subject: RE: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Yes
url: https://www.ote.arin.net/rest/net/NET-198-36-189-64-1/reassign?apikey=MY-API-KEY
method is PUT
payload is

<?xml version="1.0" encoding="UTF-8"?>

<net xmlns="http://www.arin.net/regrws/core/v1">
  <netBlocks>
    <netBlock>
      <cidrLength>29</cidrLength>
      <startAddress>198.36.189.64</startAddress>
      <type>S</type>
    </netBlock>
  </netBlocks>
  <netName>Q0113-198-36-189-64</netName>
  <orgHandle>CBC-208</orgHandle>
  <originASes>
    <originAS>209</originAS>
  </originASes>
  <parentNetHandle>NET-198-36-189-64-1</parentNetHandle>
  <version>4</version>
</net>

Response code is 401
Response message is Unauthorized
The xml returned by Arin is

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1">
<additionalInfo/>
<code>E_AUTHENTICATION</code>
<components/>
<message>The API key is not authorized to make that request.</message>
</error>



Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

From: Jon Worley [mailto:jonw at arin.net]
Sent: Monday, January 12, 2015 5:43 PM
To: Zhao, Sean; 'arin-tech-discuss at arin.net'
Subject: Re: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Hello Sean,

Can you please send the payload/URL to us via Ask ARIN?  It's difficult for us to give you an exact answer without looking at the full context.

If you have any further questions, comments, or concerns please respond to this message or contact me directly.

Regards,

Jon Worley
Principal Technical Analyst
ARIN Registration Services
https://www.arin.net/
hostmaster at arin.net<mailto:hostmaster at arin.net>
703.227.0660

From: <Zhao>, Sean <Sean.Zhao at CenturyLink.com<mailto:Sean.Zhao at CenturyLink.com>>
Date: Monday, January 12, 2015 at 11:45 AM
To: "'arin-tech-discuss at arin.net<mailto:'arin-tech-discuss at arin.net>'" <arin-tech-discuss at arin.net<mailto:arin-tech-discuss at arin.net>>
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Hi,
                I was trying to swip an ip 198.36.189.64/29. I was expecting an error return from Arin because this ip has been assigned already. But when I was trying to assign this ip, the error message I got from Arin is
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1"<http://www.arin.net/regrws/core/v1%22>>
<additionalInfo/><code>E_AUTHENTICATION</code>
<components/>
<message>The API key is not authorized to make that request.</message>
</error>

Somehow that does not make sense to me because this was assigned by me last week. That means I do have good APIKEY. I am trying to work on the error handling. So I am expecting to get error like "this ip has been assigned already" or "overlaps with existing network(s)".

Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150119/d3c21587/attachment.html>

From gdubin at arin.net  Mon Jan 19 12:14:39 2015
From: gdubin at arin.net (Garth Dubin)
Date: Mon, 19 Jan 2015 17:14:39 +0000
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized
 means?
In-Reply-To: <C4D5F96B55BE8B43AB4BBB7EACB706ED64AA3535@PDDCWMBXEX504.ctl.intranet>
References: <D0D9B7E0.6C27F%jonw@arin.net>
	<C4D5F96B55BE8B43AB4BBB7EACB706ED64AA27B8@PDDCWMBXEX504.ctl.intranet>,
	<C4D5F96B55BE8B43AB4BBB7EACB706ED64AA34B6@PDDCWMBXEX504.ctl.intranet>
	<DFE5D183A6C0674CAA396904EA24ED2E01118984AB@CHAMBX01.corp.arin.net>,
	<C4D5F96B55BE8B43AB4BBB7EACB706ED64AA3535@PDDCWMBXEX504.ctl.intranet>
Message-ID: <DFE5D183A6C0674CAA396904EA24ED2E0111898551@CHAMBX01.corp.arin.net>

Sean,

I believe the reason behind these different errors is because in the first case, involving 198.36.189.64/29, you were trying to reassign the entire block.  Since the entire block was held by another organization, you got an unauthorized message.

In the second case, you still control the majority of the block.  However you previously reassigned some ranges within it.  The one I found was 65.127.10.176/29 but there may be others.  So in this case you have permission for the start IP you specified but there are networks within the range that have already been reassigned.

I hope this helps explain it.  Let me know if you have further questions.

Regards,

Garth Dubin
Software Integration Manager

________________________________
From: Zhao, Sean [Sean.Zhao at CenturyLink.com]
Sent: Monday, January 19, 2015 11:10 AM
To: Garth Dubin; 'arin-tech-discuss at arin.net'
Subject: RE: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Thanks Garth!!

                If this is the reason, I have one more question regarding the same issue.

                I try to assign https://www.ote.arin.net/rest/net/NET-65-112-0-0-1/reassign?apikey=MYAPIKEY. Payload is
<net xmlns="http://www.arin.net/regrws/core/v1">
  <netBlocks>
    <netBlock>
      <cidrLength>27</cidrLength>
      <startAddress>65.127.10.160</startAddress>
      <type>S</type>
    </netBlock>
  </netBlocks>
  <netName>Q0119-65-127-10-160</netName>
  <orgHandle>CBC-208</orgHandle>
  <originASes>
    <originAS>209</originAS>
  </originASes>
  <parentNetHandle>NET-65-112-0-0-1</parentNetHandle>
  <version>4</version>
</net>

                It is exactly same case as I tried to assign 198.36.189.64/29 before, except the ip and mask no are different. I should get same ?The API key is not authorized to make that request.? , Response code is 401,Response message is Unauthorized.
But instead I got,

Response code is 400,
Response message : Bad Request
And response xml from Arin
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1">
<add  itionalInfo/><code>E_ENTITY_VALIDATION</code>
<components>
<component>
<message>IP range overlaps with existing network(s).</message>
<name>startAddress</nam  e>
</component>
</components>
<message>Payload entity failed to validate; see component messages for details.</message>
</error>

They both, 65.127.10.160/27 and 198.36.189.64/29 are assigned to CBC-208. And I tried to assign both netBlocks to another company wrongly. I should get same error messages for both transaction. Correct?

Thanks

Sean Zhao
sean.zhao at centurylink.com

From: Garth Dubin [mailto:gdubin at arin.net]
Sent: Monday, January 19, 2015 10:49 AM
To: Zhao, Sean; 'arin-tech-discuss at arin.net'
Subject: RE: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Sean,

The authorization scheme currently just verifies whether you have permission to reassign the specified block.  Since it's already been reassigned to another organization, you technically do not have permission to reassign it again.  If you want to reassign it to a new party, you'd have to delete the existing reassignment and perform the reassign call again.

As for the error handling, I see your point and we can investigate how to make the messaging more detailed in a future release.  Please file an ACSP regarding the error messaging in the registration system so that we can track this request and prioritize along with other suggested improvements.  The form can be found here:

https://www.arin.net/public/acsp/index.xhtml

Regards,

Garth Dubin
Software Integration Manager

________________________________
From: arin-tech-discuss-bounces at arin.net<mailto:arin-tech-discuss-bounces at arin.net> [arin-tech-discuss-bounces at arin.net] on behalf of Zhao, Sean [Sean.Zhao at CenturyLink.com]
Sent: Monday, January 19, 2015 9:39 AM
To: Zhao, Sean; Jon Worley; 'arin-tech-discuss at arin.net'
Subject: Re: [arin-tech-discuss] Would anybody explain what Unauthorized means?
Just wonder if there is any luck there?

Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

From: Zhao, Sean
Sent: Tuesday, January 13, 2015 9:36 AM
To: 'Jon Worley'; 'arin-tech-discuss at arin.net'
Subject: RE: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Yes
url: https://www.ote.arin.net/rest/net/NET-198-36-189-64-1/reassign?apikey=MY-API-KEY
method is PUT
payload is

<?xml version="1.0" encoding="UTF-8"?>

<net xmlns="http://www.arin.net/regrws/core/v1">
  <netBlocks>
    <netBlock>
      <cidrLength>29</cidrLength>
      <startAddress>198.36.189.64</startAddress>
      <type>S</type>
    </netBlock>
  </netBlocks>
  <netName>Q0113-198-36-189-64</netName>
  <orgHandle>CBC-208</orgHandle>
  <originASes>
    <originAS>209</originAS>
  </originASes>
  <parentNetHandle>NET-198-36-189-64-1</parentNetHandle>
  <version>4</version>
</net>

Response code is 401
Response message is Unauthorized
The xml returned by Arin is

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1">
<additionalInfo/>
<code>E_AUTHENTICATION</code>
<components/>
<message>The API key is not authorized to make that request.</message>
</error>



Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

From: Jon Worley [mailto:jonw at arin.net]
Sent: Monday, January 12, 2015 5:43 PM
To: Zhao, Sean; 'arin-tech-discuss at arin.net'
Subject: Re: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Hello Sean,

Can you please send the payload/URL to us via Ask ARIN?  It?s difficult for us to give you an exact answer without looking at the full context.

If you have any further questions, comments, or concerns please respond to this message or contact me directly.

Regards,

Jon Worley
Principal Technical Analyst
ARIN Registration Services
https://www.arin.net/
hostmaster at arin.net<mailto:hostmaster at arin.net>
703.227.0660

From: <Zhao>, Sean <Sean.Zhao at CenturyLink.com<mailto:Sean.Zhao at CenturyLink.com>>
Date: Monday, January 12, 2015 at 11:45 AM
To: "'arin-tech-discuss at arin.net<mailto:'arin-tech-discuss at arin.net>'" <arin-tech-discuss at arin.net<mailto:arin-tech-discuss at arin.net>>
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Hi,
                I was trying to swip an ip 198.36.189.64/29. I was expecting an error return from Arin because this ip has been assigned already. But when I was trying to assign this ip, the error message I got from Arin is
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1"<http://www.arin.net/regrws/core/v1%22>>
<additionalInfo/><code>E_AUTHENTICATION</code>
<components/>
<message>The API key is not authorized to make that request.</message>
</error>

Somehow that does not make sense to me because this was assigned by me last week. That means I do have good APIKEY. I am trying to work on the error handling. So I am expecting to get error like ?this ip has been assigned already? or ?overlaps with existing network(s)?.

Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150119/ee80bc6f/attachment.html>

From Sean.Zhao at CenturyLink.com  Mon Jan 19 14:34:17 2015
From: Sean.Zhao at CenturyLink.com (Zhao, Sean)
Date: Mon, 19 Jan 2015 19:34:17 +0000
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized
 means?
In-Reply-To: <DFE5D183A6C0674CAA396904EA24ED2E0111898551@CHAMBX01.corp.arin.net>
References: <D0D9B7E0.6C27F%jonw@arin.net>
	<C4D5F96B55BE8B43AB4BBB7EACB706ED64AA27B8@PDDCWMBXEX504.ctl.intranet>,
	<C4D5F96B55BE8B43AB4BBB7EACB706ED64AA34B6@PDDCWMBXEX504.ctl.intranet>
	<DFE5D183A6C0674CAA396904EA24ED2E01118984AB@CHAMBX01.corp.arin.net>,
	<C4D5F96B55BE8B43AB4BBB7EACB706ED64AA3535@PDDCWMBXEX504.ctl.intranet>
	<DFE5D183A6C0674CAA396904EA24ED2E0111898551@CHAMBX01.corp.arin.net>
Message-ID: <C4D5F96B55BE8B43AB4BBB7EACB706ED64AA35FA@PDDCWMBXEX504.ctl.intranet>

Thanks a lot Garth!
I understand now! :)

Thanks

Sean Zhao
sean.zhao at centurylink.com

From: Garth Dubin [mailto:gdubin at arin.net]
Sent: Monday, January 19, 2015 12:15 PM
To: Zhao, Sean; 'arin-tech-discuss at arin.net'
Subject: RE: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Sean,

I believe the reason behind these different errors is because in the first case, involving 198.36.189.64/29, you were trying to reassign the entire block.  Since the entire block was held by another organization, you got an unauthorized message.

In the second case, you still control the majority of the block.  However you previously reassigned some ranges within it.  The one I found was 65.127.10.176/29 but there may be others.  So in this case you have permission for the start IP you specified but there are networks within the range that have already been reassigned.

I hope this helps explain it.  Let me know if you have further questions.

Regards,

Garth Dubin
Software Integration Manager

________________________________
From: Zhao, Sean [Sean.Zhao at CenturyLink.com]
Sent: Monday, January 19, 2015 11:10 AM
To: Garth Dubin; 'arin-tech-discuss at arin.net'
Subject: RE: [arin-tech-discuss] Would anybody explain what Unauthorized means?
Thanks Garth!!

                If this is the reason, I have one more question regarding the same issue.

                I try to assign https://www.ote.arin.net/rest/net/NET-65-112-0-0-1/reassign?apikey=MYAPIKEY. Payload is
<net xmlns="http://www.arin.net/regrws/core/v1">
  <netBlocks>
    <netBlock>
      <cidrLength>27</cidrLength>
      <startAddress>65.127.10.160</startAddress>
      <type>S</type>
    </netBlock>
  </netBlocks>
  <netName>Q0119-65-127-10-160</netName>
  <orgHandle>CBC-208</orgHandle>
  <originASes>
    <originAS>209</originAS>
  </originASes>
  <parentNetHandle>NET-65-112-0-0-1</parentNetHandle>
  <version>4</version>
</net>

                It is exactly same case as I tried to assign 198.36.189.64/29 before, except the ip and mask no are different. I should get same "The API key is not authorized to make that request." , Response code is 401,Response message is Unauthorized.
But instead I got,

Response code is 400,
Response message : Bad Request
And response xml from Arin
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1">
<add  itionalInfo/><code>E_ENTITY_VALIDATION</code>
<components>
<component>
<message>IP range overlaps with existing network(s).</message>
<name>startAddress</nam  e>
</component>
</components>
<message>Payload entity failed to validate; see component messages for details.</message>
</error>

They both, 65.127.10.160/27 and 198.36.189.64/29 are assigned to CBC-208. And I tried to assign both netBlocks to another company wrongly. I should get same error messages for both transaction. Correct?

Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

From: Garth Dubin [mailto:gdubin at arin.net]
Sent: Monday, January 19, 2015 10:49 AM
To: Zhao, Sean; 'arin-tech-discuss at arin.net'
Subject: RE: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Sean,

The authorization scheme currently just verifies whether you have permission to reassign the specified block.  Since it's already been reassigned to another organization, you technically do not have permission to reassign it again.  If you want to reassign it to a new party, you'd have to delete the existing reassignment and perform the reassign call again.

As for the error handling, I see your point and we can investigate how to make the messaging more detailed in a future release.  Please file an ACSP regarding the error messaging in the registration system so that we can track this request and prioritize along with other suggested improvements.  The form can be found here:

https://www.arin.net/public/acsp/index.xhtml

Regards,

Garth Dubin
Software Integration Manager

________________________________
From: arin-tech-discuss-bounces at arin.net<mailto:arin-tech-discuss-bounces at arin.net> [arin-tech-discuss-bounces at arin.net] on behalf of Zhao, Sean [Sean.Zhao at CenturyLink.com]
Sent: Monday, January 19, 2015 9:39 AM
To: Zhao, Sean; Jon Worley; 'arin-tech-discuss at arin.net'
Subject: Re: [arin-tech-discuss] Would anybody explain what Unauthorized means?
Just wonder if there is any luck there?

Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

From: Zhao, Sean
Sent: Tuesday, January 13, 2015 9:36 AM
To: 'Jon Worley'; 'arin-tech-discuss at arin.net'
Subject: RE: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Yes
url: https://www.ote.arin.net/rest/net/NET-198-36-189-64-1/reassign?apikey=MY-API-KEY
method is PUT
payload is

<?xml version="1.0" encoding="UTF-8"?>

<net xmlns="http://www.arin.net/regrws/core/v1">
  <netBlocks>
    <netBlock>
      <cidrLength>29</cidrLength>
      <startAddress>198.36.189.64</startAddress>
      <type>S</type>
    </netBlock>
  </netBlocks>
  <netName>Q0113-198-36-189-64</netName>
  <orgHandle>CBC-208</orgHandle>
  <originASes>
    <originAS>209</originAS>
  </originASes>
  <parentNetHandle>NET-198-36-189-64-1</parentNetHandle>
  <version>4</version>
</net>

Response code is 401
Response message is Unauthorized
The xml returned by Arin is

<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1">
<additionalInfo/>
<code>E_AUTHENTICATION</code>
<components/>
<message>The API key is not authorized to make that request.</message>
</error>



Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

From: Jon Worley [mailto:jonw at arin.net]
Sent: Monday, January 12, 2015 5:43 PM
To: Zhao, Sean; 'arin-tech-discuss at arin.net'
Subject: Re: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Hello Sean,

Can you please send the payload/URL to us via Ask ARIN?  It's difficult for us to give you an exact answer without looking at the full context.

If you have any further questions, comments, or concerns please respond to this message or contact me directly.

Regards,

Jon Worley
Principal Technical Analyst
ARIN Registration Services
https://www.arin.net/
hostmaster at arin.net<mailto:hostmaster at arin.net>
703.227.0660

From: <Zhao>, Sean <Sean.Zhao at CenturyLink.com<mailto:Sean.Zhao at CenturyLink.com>>
Date: Monday, January 12, 2015 at 11:45 AM
To: "'arin-tech-discuss at arin.net<mailto:'arin-tech-discuss at arin.net>'" <arin-tech-discuss at arin.net<mailto:arin-tech-discuss at arin.net>>
Subject: [arin-tech-discuss] Would anybody explain what Unauthorized means?

Hi,
                I was trying to swip an ip 198.36.189.64/29. I was expecting an error return from Arin because this ip has been assigned already. But when I was trying to assign this ip, the error message I got from Arin is
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<error xmlns="http://www.arin.net/regrws/core/v1"<http://www.arin.net/regrws/core/v1%22>>
<additionalInfo/><code>E_AUTHENTICATION</code>
<components/>
<message>The API key is not authorized to make that request.</message>
</error>

Somehow that does not make sense to me because this was assigned by me last week. That means I do have good APIKEY. I am trying to work on the error handling. So I am expecting to get error like "this ip has been assigned already" or "overlaps with existing network(s)".

Thanks

Sean Zhao
sean.zhao at centurylink.com<mailto:sean.zhao at centurylink.com>

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-tech-discuss/attachments/20150119/df86d6c3/attachment.html>