It appears that you have a redirect bug in your Cloudflare Tunnel documentation.
When you receive this error:
ERR You need to specify the origin certificate path by specifying the origincert option in the configuration file, or set TUNNEL_ORIGIN_CERT environment variable. See https://developers.cloudflare.com/argo-tunnel/reference/service/ for more information. originCertPath=
This url redirects to a url with an invalid “Cloudflare-one” hostname (looks like you are leaking an internal hostname):
$ curl -v https://developers.cloudflare.com/argo-tunnel/reference/service/ 2>&1 | grep -i location
< location: https://cloudflare-one/connections/connect-apps/install-and-setup/tunnel-guide/local/as-a-service/