[arin-ppml] Have we REALLY got to this sad state of disrepair?

[Ted Mittelstaedt]

The entire point of IDing these was to ID abandoned number resources so 
as to make them available for reassignment.

So why are we getting upset about crufty stuff in the ARIN database that 
is not tied to a number resource?

Take for example block NET-199-248-255-0-1   I've used that one before 
as an example of a zombie block.  It's not being used by that org and I
happen to know this because I was involved with the ISP that routed it 
for them 2 decades ago.  I've reported this to ARIN before and been 
ignored because "they might be using it internally" AKA Arin is too busy 
to call them and ask them "are you still using this block"

So if it's a zombie as I assert, you should NEVER receive a packet from 
it.  If it's only used internally as ARIN uses as an 
excuse-I-mean-claims, then once more you should never receive a packet 
from it.

And well lookie here, it's not in the BGP table at least according to
Sprint's Looking Glass.  So it's impossible for you to get a packet from 
it that is going to be useful in any sort of modern spam or attack.

So, if at some point in the future you DO get attacked from a number in 
that block, well then if you call the POC they will say "we didn't send
that" and then you follow that up by reporting it to the AS that's 
advertising that block, and they stonewall you or lie and deny it, what 
is ARIN going to do if you report this to them?

Nothing, I am betting.

The point of POC validation was that it became the first step to 
de-registering IP number resources that are either not being advertised 
at all and not being used by their POCs, or IP number resources that are
being used for abuse, and the AS that is advertising them refuses to
fill out the REAL owner of that block in it's POC so that legal 
proceedings can be started against the attacker by the victim.

ARIN has been pussyfooting around long enough with these zombie 
resources, by now CKN23-ARIN should NEVER appear tied to a number
resource.  Please, get on the stick and get these resources freed so
they can be used.  Need I remind everyone we have been out of IPv4
and yet there's still a need for it???

I'd also bet money that ARIN has NEVER gotten a response from
  NET-199-248-255-0-1 as a result of querying them on a validity check.
Yet in the meantime every time I have a customer that needs a /28 I
get the 3rd degree from the assigning ISP with lots of threats that
if we don't put valid info in there, we will lose the block.

Ted

On 4/11/2022 10:29 AM, John Sweeting wrote:
> Michael,
> 
> Depending on where you saw this it could be related to 2 different issues:
> 
> - an Org ID having direct assignments/allocations where the POC contacts ARIN asking to be removed as they are no longer associated with that organization. If they are unable to provide a replacement POC, ARIN staff uses CKN23-ARIN as a placeholder. ARIN then follows up to find a valid POC for the organization but this leaves CKN23-ARIN as the POC until we can actually find a valid POC replacement. The number of organizations affected varies but is small compared to the second case below.
> 
> - Provider reassignments/reallocations that had no valid POC associated with the Org ID when Policy 2010-14 was implemented requiring all Org IDs to have a Tech and Abuse POC so ARIN staff added CKN23-ARIN to put these Org IDs into compliance with the policy. Today ARIN uses the provider's POC for reassignments/reallocations that end up without a valid POC. This is a significant number of Org IDs so it is most likely where you would see POC CKN23-ARIN. Since these are reassignments/reallocations the provider with the ARIN directly issued resources should be contacted when you run into this.
> 
> So this is not really a sad state of disrepair as much as a way to identify organizations that do not have a valid POC so that ARIN can continue working to identify valid POCs for these organizations.
> 
> Please see the following announcement for more information:
> 
> https://www.arin.net/vault/announcements/2017/20171115.html
> 
> ARIN staff is continuously updating or eliminating this type of POC whenever possible. Please let us know if you have any further questions.
> 
> Thanks,
> John S.
> 
> 
> On 4/11/22, 11:26 AM, "ARIN-PPML on behalf of Michael Peddemors" <arin-ppml-bounces at arin.net on behalf of michael at linuxmagic.com> wrote:
> 
>      OrgTechHandle: CKN23-ARIN
>      OrgTechName:   No, Contact Known
>      OrgTechPhone:  +1-800-555-1234
>      OrgTechEmail:  nobody at example.com
>      OrgTechRef:    https://rdap.arin.net/registry/entity/CKN23-ARIN
> 
>      OrgAbuseHandle: CKN23-ARIN
>      OrgAbuseName:   No, Contact Known
>      OrgAbusePhone:  +1-800-555-1234
>      OrgAbuseEmail:  nobody at example.com
>      OrgAbuseRef:    https://rdap.arin.net/registry/entity/CKN23-ARIN
> 
> 
>      --
>      "Catch the Magic of Linux..."
>      ------------------------------------------------------------------------
>      Michael Peddemors, President/CEO LinuxMagic Inc.
>      Visit us at http://www.linuxmagic.com @linuxmagic
>      A Wizard IT Company - For More Info http://www.wizard.ca
>      "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
>      ------------------------------------------------------------------------
>      604-682-0300 Beautiful British Columbia, Canada
> 
>      This email and any electronic data contained are confidential and intended
>      solely for the use of the individual or entity to which they are addressed.
>      Please note that any views or opinions presented in this email are solely
>      those of the author and are not intended to represent those of the company.
>      _______________________________________________
>      ARIN-PPML
>      You are receiving this message because you are subscribed to
>      the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
>      Unsubscribe or manage your mailing list subscription at:
>      https://lists.arin.net/mailman/listinfo/arin-ppml
>      Please contact info at arin.net if you experience any issues.
> 
> _______________________________________________
> ARIN-PPML
> You are receiving this message because you are subscribed to
> the ARIN Public Policy Mailing List (ARIN-PPML at arin.net).
> Unsubscribe or manage your mailing list subscription at:
> https://lists.arin.net/mailman/listinfo/arin-ppml
> Please contact info at arin.net if you experience any issues.