RPKI Service Notice Update

Posted: Thursday, 13 August 2020

After upgrading our HSM on Wednesday, August 12, 2020, Job Snijders reported to us that our RPKI repository was no longer validating using rpki-client or fort. Upon investigation, it was discovered that we had an encoding error in our new software. (Specifically, there was a mismatch in the “parameters” field between the “algorithm identifier” of the certificate and the certificate To Be Signed [TBS]. The TBS set the “parameters” as null and the certificate as empty.)

A fix has been made and there will be a pending data clean up in the next few days to fix some of the ROAs created during the interim.

We would like to thank Sebastian Benoit, Theo Buehler, Joel Sing, Job Snijders, and Claudio Jeker, from the OpenBSD project (https://openbsd.org), as they spent considerable time working with us to identify the root cause of the issue.

Regards,

Richard Jimmerson
Chief Operating Officer
American Registry for Internet Numbers (ARIN)