Authentication Failure
If there’s a matching AS RR and the origin AS doesn’t match
- this is an authentication failure
- log BGP sender, prefix, and origin
- select a different path
- withdraw it, if it has been advertised
- generate SNMP trap
- other alarms appropriate to environment