Crazy that .one gets locked, but .arpa is fully okay.
That's not going to pass the domain ownership validation though.