Re: [sidr] RPKI validator testing summary

[Andrew Chi <[e-mail]>]

On 12/6/2011 11:55 AM, Tim Bruijnzeels wrote:
> And possibly in future for other (non-sidr even) object types that an address holder may not necessarily want to publish in the global rpki, but send directly to any RP for validation instead.

Let's clarify the terminology.

1. Certification path validation is always top down (rfc5280)
2. Path *discovery* is not covered by rfc5280.

AIA is for #2, discovery.  Based on the preceding discussion, the global 
rpki appears to need only top-down discovery(?).  Tim has given an 
example where bottom-up discovery could be useful -- data sent directly 
to an RP rather than published in the global rpki.

-Andrew