This Rock instance does not use the External website. Their public root pointed to their business website not associated with Rock. To make the person token work the root application folder had to point to the InternalApplication Root. This was the new token:
href="{{ 'Global' | Attribute:'InternalApplicationRoot' }}ContributionStatement?StatementYear=2022&rckipid={% raw %}{{ Person | PersonTokenCreate:43200,null,686 }}{% endraw %}">
Thank you to Mason and Kate who figured this out.