How to find the source of operation in netlink

There's a route I'm trying to add that seems to be automatically deleted by something in my OS/kernel itself. I can't seem to get the origin of this or the reason. When I add the route, the command returns with success return code, but the route is automatically deleted afterwards. I understood this by running "ip monitor" while adding the route:

[admin@localhost]# ip monitor
10.0.200.0/24 via 172.28.22.77 dev eth0
Deleted 10.0.200.0/24 via 172.28.22.77 dev eth0

ifconfig output

eth0        Link encap:Ethernet  HWaddr FA:16:3E:38:4D:37
            inet addr:172.28.22.69  Bcast:0.0.0.0  Mask:255.255.255.0
            UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
            RX packets:2736107 errors:0 dropped:0 overruns:0 frame:0
            TX packets:2182213 errors:0 dropped:0 overruns:0 carrier:0
            collisions:0 txqueuelen:1000
            RX bytes:1048260068 (999.6 MiB)  TX bytes:721457827 (688.0 MiB)

eth1        Link encap:Ethernet  HWaddr FA:16:3E:5A:0B:7B
            inet addr:10.0.1.1  Bcast:0.0.0.0  Mask:255.255.255.0
            UP BROADCAST RUNNING MULTICAST  MTU:1442  Metric:1
            RX packets:219011 errors:0 dropped:0 overruns:0 frame:0
            TX packets:6226 errors:0 dropped:0 overruns:0 carrier:0
            collisions:0 txqueuelen:1000
            RX bytes:16615758 (15.8 MiB)  TX bytes:604640 (590.4 KiB)

eth2        Link encap:Ethernet  HWaddr FA:16:3E:FC:70:BB
            inet addr:10.0.102.2  Bcast:0.0.0.0  Mask:255.255.255.0
            UP BROADCAST RUNNING MULTICAST  MTU:1442  Metric:1
            RX packets:8003258 errors:0 dropped:0 overruns:0 frame:0
            TX packets:8244005 errors:0 dropped:0 overruns:0 carrier:0
            collisions:0 txqueuelen:1000
            RX bytes:1170711154 (1.0 GiB)  TX bytes:1209767665 (1.1 GiB)

eth3        Link encap:Ethernet  HWaddr FA:16:3E:B7:4B:52
            inet addr:10.0.103.2  Bcast:0.0.0.0  Mask:255.255.255.0
            UP BROADCAST RUNNING MULTICAST  MTU:1442  Metric:1
            RX packets:8438950 errors:0 dropped:0 overruns:0 frame:0
            TX packets:8214673 errors:0 dropped:0 overruns:0 carrier:0
            collisions:0 txqueuelen:1000
            RX bytes:1241830785 (1.1 GiB)  TX bytes:1205550668 (1.1 GiB)

lo          Link encap:Local Loopback  Media:unknown(auto)
            inet addr:127.0.0.1  Mask:255.0.0.0
            UP LOOPBACK NOTRAILERS RUNNING NOARP DYNAMIC  MTU:65536  Metric:1
            RX packets:3030700 errors:0 dropped:0 overruns:0 frame:0
            TX packets:3030700 errors:0 dropped:0 overruns:0 carrier:0
            collisions:0 txqueuelen:1000
            RX bytes:673968967 (642.7 MiB)  TX bytes:673968967 (642.7 MiB)

Here's the route I'm trying to add:

ip route add 10.0.200.0/24 via 172.28.22.77

Any idea how to debug this/ find the origin?