It was connecting and authenticating properly, but the pushed routes from the OpenVPN server were not respected. Apparently this is specific to Windows (7?) and it's fixed by adding the following to the client config file:
script-security 2 systemI found this solution here.
