ROA Failure

ROA Failure

This alarm indicates whether the ROA validity state of the monitored prefix is invalid. see Any advertisement for the monitored prefix with origin AS that is not in any ROA record covering the prefix is a violating advertisement. The alarm clears either due to the addition of ROA records that include all observed Origin ASNs of the prefix or all records expiring. Specifically, this alarm does not activate if there are no ROA records (none existed or all are expired).

For more information on ROAs, see ripe.net.

Possible Problem Detected

This alarm can help identify prefix hijack attempts.

Relevant Alarm Rule Configurations

The following option must be configured when adding this alarm rule to a Prefix policy configuration (External Routing Analysis > Configure > Policies > Add Policy > Prefix Policy > Add Rule > ROA Failure):