I ran a series of additional tests and found that the problem was that the TO address that I was testing with, forwarded the mail to Gmail. If I sent the mail directly to Gmail, the hash passed.
However, this still confuses me as I look at the headers of other mail sent to this address, and the DKIM hash passes. Why would this be different?