Jay, Unfortunately our system does not have the proper set of features to allow make-before-break when moving from hosted RPKI to delegated RPKI. Currently moving from hosted to delegated requires revocation of the CA certificate in the RPKI and re-issuance of a new certificate.
If this is a feature you would like to have considered for implementation by ARIN, please submit it as a suggestion via the ARIN Consultation and Suggestion Process. The one page form for submitting ACSP suggestions can be found here: https://www.arin.net/app/suggestion/ I hope this answers your question. Let me know if it does not. Andy Newton, Chief Engineer, ARIN On 11/25/13 3:09 PM, "Jay Borkenhagen" <[email protected]> wrote: >ARIN, > >Regarding https://www.arin.net/resources/rpki/index.html: > >Suppose a resource holder starts off using the Hosted RPKI model and >later wishes to transition to Delegated RPKI. Can this transition be >structured in a make-before-break manner, such that no disruption in >validation status is experienced? > >Thank you. > > Jay B. > > >_______________________________________________ >arin-tech-discuss mailing list >[email protected] >http://lists.arin.net/mailman/listinfo/arin-tech-discuss > _______________________________________________ arin-tech-discuss mailing list [email protected] http://lists.arin.net/mailman/listinfo/arin-tech-discuss
