I checked this internally and it is intentional that (self) downloading the ArubaOS-CX OVA for lab purposes requires an entitlement (like existing ArubaOS-CX customer, Aruba partner) in the Aruba Support Portal.
For cases where this entitlement is not present, an Aruba SE can provide you the OVA.