ASN in use, but no whois data?

Fri Feb 25 23:02:03 UTC 2022

Legacy lookup here

ASHandle:       AS394183
OrgID:          ORCL-2
ASName:         OROCKLLC-USA-ASN
ASNumber:       394183
RegDate:        2015-07-01
Updated:        2015-07-01
Source:         ARIN

OrgID:          ORCL-2
OrgName:        Orange Rock Consulting, LLC
CanAllocate:
Street:         300 West Glenoaks Blvd., Suite 106
City:           Glendale
State/Prov:     CA
Country:        US
PostalCode:     91202
RegDate:        2014-11-26
Updated:        2014-11-26
OrgAbuseHandle: LEONJ4-ARIN
OrgAdminHandle: LEONJ4-ARIN
OrgNOCHandle:   LEONJ4-ARIN
OrgTechHandle:  LEONJ4-ARIN
Source:         ARIN

POCHandle:      LEONJ4-ARIN
IsRole:         N
LastName:       Leon
FirstName:      John
Street:         300 West Glenoaks Blvd., Suite 106
City:           Glendale
State/Prov:     CA
Country:        US
PostalCode:     91202
RegDate:        2014-11-24
Updated:        2020-12-01
MobilePhone:    +1-714-782-4326
FaxPhone:       +1-818-484-2010
OfficePhone:    +1-800-253-6121
Mailbox:        john at orockllc.com
Source:         ARIN

--srs
________________________________
From: NANOG <nanog-bounces+ops.lists=gmail.com at nanog.org> on behalf of Phineas Walton <phin at phineas.io>
Sent: Saturday, February 26, 2022 4:25:56 AM
To: Matt Harris <matt at netfire.net>
Cc: North American Network Operators' Group <nanog at nanog.org>
Subject: Re: ASN in use, but no whois data?

The AS customer could've churned from ARIN, freeing the ASN but leaving technically valid IRRs in databases such as RADb (which seems to be where they originate): https://i.imgur.com/r5xx7Y6.png

..thus allowing them to continue to announce their routes under that ASN as usual, even though technically it doesn't exist in the ARIN WHOIS.

Phin

On Fri, Feb 25, 2022 at 10:47 PM Matt Harris <matt at netfire.net<mailto:matt at netfire.net>> wrote:
Hey folks,
I'm looking at an ASN 394183 and I can't find any whois or other contact data. I've checked globally and then also ARIN directly and literally nothing as if it weren't registered. It's announcing prefixes, at least one of which is IRR invalid part of a larger old PSINET block, though, and I'm seeing them in the global routing table.

Anyone have any idea how this could happen where an ASN is in use, transiting several major providers to the internet, but no whois data as if it didn't exist?

Thanks,
Matt

[X]
Matt Harris
|
Infrastructure Lead
816‑256‑5446
|
Direct
Looking for help?
Helpdesk<https://help.netfire.net/>
|
Email Support<mailto:help at netfire.net>
[https://netfire.net/Flag-United-States-of-America.jpg]
We build customized end‑to‑end technology solutions powered by NetFire Cloud.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20220225/c81f8631/attachment.html>