/usr/sbin/puppetca is in puppetmaster-common 2.7.11-1ubuntu2.
This file is owned by root:root, with mode 0o755.
The actual contents of the file can be viewed below.
1 2 3 4 | #!/usr/bin/ruby1.8
require 'puppet/application/cert'
Puppet::Application[:cert].run
|