From mcrossin at arin.net Mon Oct 2 09:33:38 2017 From: mcrossin at arin.net (Michael Crossin) Date: Mon, 2 Oct 2017 13:33:38 +0000 Subject: [arin-tech-discuss] October OT&E Refresh Message-ID: <6FE462C2-F228-4F86-A9BF-0CAA84B14869@arin.net> List, This message serves as a notification that the Operational Testing and Evaluation environment will soon begin its monthly maintenance for a code and data refresh today. Scheduled Work: The OT&E whois and other application servers will now update to code matching production versions with refreshed database data. Querying whois.ote.arin.net will not respond until this maintenance has completed. Expected Duration: 6 hours Updates: Following the scheduled maintenance there will be a follow up message indicating completion. Thanks, Mike Crossin Database Systems Administrator American Registry for Internet Numbers -------------- next part -------------- An HTML attachment was scrubbed... URL: From mcrossin at arin.net Mon Oct 2 22:17:29 2017 From: mcrossin at arin.net (Michael Crossin) Date: Tue, 3 Oct 2017 02:17:29 +0000 Subject: [arin-tech-discuss] October OT&E Refresh - Complete Message-ID: List, Apologies for the delayed notification. The refresh of the Operational Testing and Evaluation environment was completed within the outlined maintenance window. All systems within this environment should be accessible to you now if you have requested access to it. If you have requested access previously, there is no need to re-request. If you experience any issues in using the OT&E environment or notice anything erroneous, please reach out to us. Thanks, Mike Crossin Database Systems Administrator American Registry for Internet Numbers -------------- next part -------------- An HTML attachment was scrubbed... URL: From akg1330 at gmail.com Tue Oct 3 08:43:19 2017 From: akg1330 at gmail.com (Andrew Gallo) Date: Tue, 3 Oct 2017 08:43:19 -0400 Subject: [arin-tech-discuss] October OT&E Refresh - Complete In-Reply-To: References: Message-ID: I'm wondering is something is up with ROA creation.? I have RPKI access in the production environment, so I can create ROAs them in the OT&E.? I've submitted three requests to create ROAs in the OT&E and the tickets are still pending (one for several hours).? In the past, the ROAs were created almost instantly (<1min). I can provide some pending ticket numbers in the OT&E if that helps. Thank you. On 10/2/2017 10:17 PM, Michael Crossin wrote: > List, > > Apologies for the delayed notification. The refresh of the Operational Testing and Evaluation environment was completed within the outlined maintenance window. > > All systems within this environment should be accessible to you now if you have requested access to it. If you have requested access previously, there is no need to re-request. > > If you experience any issues in using the OT&E environment or notice anything erroneous, please reach out to us. > > Thanks, > > Mike Crossin > Database Systems Administrator > American Registry for Internet Numbers > > > > > _______________________________________________ > arin-tech-discuss mailing list > arin-tech-discuss at arin.net > http://lists.arin.net/mailman/listinfo/arin-tech-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: From pete at arin.net Tue Oct 3 10:22:22 2017 From: pete at arin.net (Pete Toscano) Date: Tue, 3 Oct 2017 14:22:22 +0000 Subject: [arin-tech-discuss] October OT&E Refresh - Complete In-Reply-To: References: Message-ID: <89C30B6D-EE59-433F-A7EE-F419936B04AD@arin.net> Thanks for letting us know, Andrew. We?re actively looking into this. Pete Toscano Network Operations Manager ARIN On Oct 3, 2017, at 8:43 AM, Andrew Gallo > wrote: I'm wondering is something is up with ROA creation. I have RPKI access in the production environment, so I can create ROAs them in the OT&E. I've submitted three requests to create ROAs in the OT&E and the tickets are still pending (one for several hours). In the past, the ROAs were created almost instantly (<1min). I can provide some pending ticket numbers in the OT&E if that helps. Thank you. On 10/2/2017 10:17 PM, Michael Crossin wrote: List, Apologies for the delayed notification. The refresh of the Operational Testing and Evaluation environment was completed within the outlined maintenance window. All systems within this environment should be accessible to you now if you have requested access to it. If you have requested access previously, there is no need to re-request. If you experience any issues in using the OT&E environment or notice anything erroneous, please reach out to us. Thanks, Mike Crossin Database Systems Administrator American Registry for Internet Numbers _______________________________________________ arin-tech-discuss mailing list arin-tech-discuss at arin.net http://lists.arin.net/mailman/listinfo/arin-tech-discuss _______________________________________________ arin-tech-discuss mailing list arin-tech-discuss at arin.net http://lists.arin.net/mailman/listinfo/arin-tech-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: From jonw at arin.net Tue Oct 3 14:29:49 2017 From: jonw at arin.net (Jon Worley) Date: Tue, 3 Oct 2017 18:29:49 +0000 Subject: [arin-tech-discuss] October OT&E Refresh - Complete In-Reply-To: References: Message-ID: <8DAE8B66-EBFB-4BBD-A9A2-23C4F7637441@arin.net> Hello Andrew, The problem should be resolved. Let us know if you continue to see problems. Best regards, Jon Worley Technical Services Manager ARIN Registration Services https://www.arin.net/ hostmaster at arin.net 703.227.0660 From: arin-tech-discuss on behalf of Andrew Gallo Date: Tuesday, October 3, 2017 at 8:44 AM To: "arin-tech-discuss at arin.net" Subject: Re: [arin-tech-discuss] October OT&E Refresh - Complete I'm wondering is something is up with ROA creation. I have RPKI access in the production environment, so I can create ROAs them in the OT&E. I've submitted three requests to create ROAs in the OT&E and the tickets are still pending (one for several hours). In the past, the ROAs were created almost instantly (<1min). I can provide some pending ticket numbers in the OT&E if that helps. Thank you. On 10/2/2017 10:17 PM, Michael Crossin wrote: List, Apologies for the delayed notification. The refresh of the Operational Testing and Evaluation environment was completed within the outlined maintenance window. All systems within this environment should be accessible to you now if you have requested access to it. If you have requested access previously, there is no need to re-request. If you experience any issues in using the OT&E environment or notice anything erroneous, please reach out to us. Thanks, Mike Crossin Database Systems Administrator American Registry for Internet Numbers _______________________________________________ arin-tech-discuss mailing list arin-tech-discuss at arin.net http://lists.arin.net/mailman/listinfo/arin-tech-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: From akg1330 at gmail.com Wed Oct 4 09:11:37 2017 From: akg1330 at gmail.com (Andrew Gallo) Date: Wed, 4 Oct 2017 09:11:37 -0400 Subject: [arin-tech-discuss] October OT&E Refresh - Complete In-Reply-To: <8DAE8B66-EBFB-4BBD-A9A2-23C4F7637441@arin.net> References: <8DAE8B66-EBFB-4BBD-A9A2-23C4F7637441@arin.net> Message-ID: <8f639533-e34d-9198-3bb2-af4a8990990c@gmail.com> Hello, Jon: Just created a ROA and the ticket resolved in less than a minute.? Thanks for taking care of this. I do have one more RPKI/OTE question if I can tag on to this email..... I've had access to the OT&E for several months now.? When I create ROAs, I use the key pair posted on the webpage at: https://www.arin.net/resources/ote.html#rpki I did not provide a key-pair when requesting OT&E RPKI access (it wasn't required). A peer of mine just requested RPKI access in the OT&E (since the last refresh)- he provided a key-pair in the request ticket inside the OT&E environment.? When he requests ROAs, he uses his key-pair. Is it fair to say, for people using the new access method, they'll use their own key-pair, and not the one on the site listed above? Thank you. On 10/3/2017 2:29 PM, Jon Worley wrote: > Hello Andrew, > > The problem should be resolved. Let us know if you continue to see problems. > > Best regards, > > Jon Worley > Technical Services Manager > ARIN Registration Services > https://www.arin.net/ > hostmaster at arin.net > 703.227.0660 > > From: arin-tech-discuss on behalf of Andrew Gallo > Date: Tuesday, October 3, 2017 at 8:44 AM > To: "arin-tech-discuss at arin.net" > Subject: Re: [arin-tech-discuss] October OT&E Refresh - Complete > > > I'm wondering is something is up with ROA creation. I have RPKI access in the production environment, so I can create ROAs them in the OT&E. I've submitted three requests to create ROAs in the OT&E and the tickets are still pending (one for several hours). In the past, the ROAs were created almost instantly (<1min). > > > > I can provide some pending ticket numbers in the OT&E if that helps. > > > > Thank you. > > > > On 10/2/2017 10:17 PM, Michael Crossin wrote: > > List, > > > > Apologies for the delayed notification. The refresh of the Operational Testing and Evaluation environment was completed within the outlined maintenance window. > > > > All systems within this environment should be accessible to you now if you have requested access to it. If you have requested access previously, there is no need to re-request. > > > > If you experience any issues in using the OT&E environment or notice anything erroneous, please reach out to us. > > > > Thanks, > > > > Mike Crossin > > Database Systems Administrator > > American Registry for Internet Numbers > > > > > > > > > _______________________________________________ > > arin-tech-discuss mailing list > > arin-tech-discuss at arin.net > > http://lists.arin.net/mailman/listinfo/arin-tech-discuss > > From jonw at arin.net Wed Oct 4 12:02:41 2017 From: jonw at arin.net (Jon Worley) Date: Wed, 4 Oct 2017 16:02:41 +0000 Subject: [arin-tech-discuss] October OT&E Refresh - Complete In-Reply-To: <8f639533-e34d-9198-3bb2-af4a8990990c@gmail.com> References: <8DAE8B66-EBFB-4BBD-A9A2-23C4F7637441@arin.net> <8f639533-e34d-9198-3bb2-af4a8990990c@gmail.com> Message-ID: <9AAEEE8D-57E5-4178-B225-41C6676B493F@arin.net> Hello Andrew, The advantage of the default key pair is that it persists over the monthly backwashes. You don?t need to re-create the certificate every time; the default key pair will always work. You *can* use your own key pair to generate a cert, but it?ll be overwritten with the default key pair during the monthly backwash, so we?d have to delete it and then you?d have to re-create it every month to keep using it. Basically, if you?re testing for more than a month, the default key pair makes life easier. You can use your own, but that means monthly deletion and re-creation. Hope that clarifies. -Jon Jon Worley Technical Services Manager ARIN Registration Services https://www.arin.net/ hostmaster at arin.net 703.227.0660 On 10/4/17, 9:13 AM, "Andrew Gallo" wrote: Hello, Jon: Just created a ROA and the ticket resolved in less than a minute. Thanks for taking care of this. I do have one more RPKI/OTE question if I can tag on to this email..... I've had access to the OT&E for several months now. When I create ROAs, I use the key pair posted on the webpage at: https://www.arin.net/resources/ote.html#rpki I did not provide a key-pair when requesting OT&E RPKI access (it wasn't required). A peer of mine just requested RPKI access in the OT&E (since the last refresh)- he provided a key-pair in the request ticket inside the OT&E environment. When he requests ROAs, he uses his key-pair. Is it fair to say, for people using the new access method, they'll use their own key-pair, and not the one on the site listed above? Thank you. On 10/3/2017 2:29 PM, Jon Worley wrote: > Hello Andrew, > > The problem should be resolved. Let us know if you continue to see problems. > > Best regards, > > Jon Worley > Technical Services Manager > ARIN Registration Services > https://www.arin.net/ > hostmaster at arin.net > 703.227.0660 > > From: arin-tech-discuss on behalf of Andrew Gallo > Date: Tuesday, October 3, 2017 at 8:44 AM > To: "arin-tech-discuss at arin.net" > Subject: Re: [arin-tech-discuss] October OT&E Refresh - Complete > > > I'm wondering is something is up with ROA creation. I have RPKI access in the production environment, so I can create ROAs them in the OT&E. I've submitted three requests to create ROAs in the OT&E and the tickets are still pending (one for several hours). In the past, the ROAs were created almost instantly (<1min). > > > > I can provide some pending ticket numbers in the OT&E if that helps. > > > > Thank you. > > > > On 10/2/2017 10:17 PM, Michael Crossin wrote: > > List, > > > > Apologies for the delayed notification. The refresh of the Operational Testing and Evaluation environment was completed within the outlined maintenance window. > > > > All systems within this environment should be accessible to you now if you have requested access to it. If you have requested access previously, there is no need to re-request. > > > > If you experience any issues in using the OT&E environment or notice anything erroneous, please reach out to us. > > > > Thanks, > > > > Mike Crossin > > Database Systems Administrator > > American Registry for Internet Numbers > > > > > > > > > _______________________________________________ > > arin-tech-discuss mailing list > > arin-tech-discuss at arin.net > > http://lists.arin.net/mailman/listinfo/arin-tech-discuss > > From akg1330 at gmail.com Wed Oct 4 14:24:26 2017 From: akg1330 at gmail.com (Andrew Gallo) Date: Wed, 4 Oct 2017 14:24:26 -0400 Subject: [arin-tech-discuss] October OT&E Refresh - Complete In-Reply-To: <9AAEEE8D-57E5-4178-B225-41C6676B493F@arin.net> References: <8DAE8B66-EBFB-4BBD-A9A2-23C4F7637441@arin.net> <8f639533-e34d-9198-3bb2-af4a8990990c@gmail.com> <9AAEEE8D-57E5-4178-B225-41C6676B493F@arin.net> Message-ID: That makes perfect sense. Thank you for taking the time to explain. On 10/4/2017 12:02 PM, Jon Worley wrote: > Hello Andrew, > > The advantage of the default key pair is that it persists over the monthly backwashes. You don?t need to re-create the certificate every time; the default key pair will always work. > > You *can* use your own key pair to generate a cert, but it?ll be overwritten with the default key pair during the monthly backwash, so we?d have to delete it and then you?d have to re-create it every month to keep using it. > > Basically, if you?re testing for more than a month, the default key pair makes life easier. You can use your own, but that means monthly deletion and re-creation. > > Hope that clarifies. > > -Jon > > Jon Worley > Technical Services Manager > ARIN Registration Services > https://www.arin.net/ > hostmaster at arin.net > 703.227.0660 > > On 10/4/17, 9:13 AM, "Andrew Gallo" wrote: > > Hello, Jon: > > > Just created a ROA and the ticket resolved in less than a minute. > Thanks for taking care of this. > > > I do have one more RPKI/OTE question if I can tag on to this email..... > > I've had access to the OT&E for several months now. When I create ROAs, > I use the key pair posted on the webpage at: > https://www.arin.net/resources/ote.html#rpki > > I did not provide a key-pair when requesting OT&E RPKI access (it wasn't > required). > > > A peer of mine just requested RPKI access in the OT&E (since the last > refresh)- he provided a key-pair in the request ticket inside the OT&E > environment. When he requests ROAs, he uses his key-pair. > > > Is it fair to say, for people using the new access method, they'll use > their own key-pair, and not the one on the site listed above? > > > Thank you. > > > > > > > On 10/3/2017 2:29 PM, Jon Worley wrote: > > Hello Andrew, > > > > The problem should be resolved. Let us know if you continue to see problems. > > > > Best regards, > > > > Jon Worley > > Technical Services Manager > > ARIN Registration Services > > https://www.arin.net/ > > hostmaster at arin.net > > 703.227.0660 > > > > From: arin-tech-discuss on behalf of Andrew Gallo > > Date: Tuesday, October 3, 2017 at 8:44 AM > > To: "arin-tech-discuss at arin.net" > > Subject: Re: [arin-tech-discuss] October OT&E Refresh - Complete > > > > > > I'm wondering is something is up with ROA creation. I have RPKI access in the production environment, so I can create ROAs them in the OT&E. I've submitted three requests to create ROAs in the OT&E and the tickets are still pending (one for several hours). In the past, the ROAs were created almost instantly (<1min). > > > > > > > > I can provide some pending ticket numbers in the OT&E if that helps. > > > > > > > > Thank you. > > > > > > > > On 10/2/2017 10:17 PM, Michael Crossin wrote: > > > > List, > > > > > > > > Apologies for the delayed notification. The refresh of the Operational Testing and Evaluation environment was completed within the outlined maintenance window. > > > > > > > > All systems within this environment should be accessible to you now if you have requested access to it. If you have requested access previously, there is no need to re-request. > > > > > > > > If you experience any issues in using the OT&E environment or notice anything erroneous, please reach out to us. > > > > > > > > Thanks, > > > > > > > > Mike Crossin > > > > Database Systems Administrator > > > > American Registry for Internet Numbers > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > arin-tech-discuss mailing list > > > > arin-tech-discuss at arin.net > > > > http://lists.arin.net/mailman/listinfo/arin-tech-discuss > > > > > > > From akg1330 at gmail.com Mon Oct 23 09:47:08 2017 From: akg1330 at gmail.com (Andrew Gallo) Date: Mon, 23 Oct 2017 09:47:08 -0400 Subject: [arin-tech-discuss] RPKI Hosted Certificate expiry Message-ID: Greetings: A question came up at an Internet2 meeting concerning hosted RPKI.? Specifically- what happens at the expiration of the Hosted Certificate? I see that the hosted certificate has a 10-year validity period, and ROAs can not be created with dates past the expiration of the Hosted Certificate. When the expiration of this certificate is approaching, what is the procedure?? Do we need to re-request Hosted Access? Regenerate ROAs?? Will there be an overlap period where both the expiring and new certificates & ROAs will both be valid (to avoid any gaps in coverage)? Thank you.