Hello friend,
The route configuration on AR4 is incorrect. The following tracert output shows that after the packets are redirected to AR4, they match the default route and are forwarded back to AR1. So 2.2.2.2 can still ping 3.3.3.33 on AR2.
<AR2>tracert -a 2.2.2.2 3.3.3.33
traceroute to 3.3.3.33(3.3.3.33), max hops: 30 ,packet length: 40,press CTRL_C
to break
1 10.0.1.1 10 ms 30 ms 20 ms
2 10.0.14.4 20 ms 30 ms 10 ms
3 10.0.14.1 20 ms 20 ms 20 ms
4 10.0.13.3 30 ms 30 ms 30 ms
You should delete the default route and configure a common static route on the AR4.
ip route-static 2.2.2.2 32 10.0.14.1
By the way, it's better to replace the default route on AR3 too. In the current configuration, if AR2 pings any unreachable IP address, a loop will occur between AR1 and AR3.
I hope this helps.