Depends which authorize.net service you are using, if you are using their SIM service that processes the card on their secure servers then you do not need a SSL certificate but if you are planning on using their AIM service then you do.
WA have an article on eCart and SSL here