A current version of AROVA must be deployed before a Protected Domain can be failed back.

See:

Re-deploy AROVA

Replicate AROVA ACD to the Primary Region