diff --git a/opendnssec.spec b/opendnssec.spec
index 8b4b7f3..d9856b3 100644
--- a/opendnssec.spec
+++ b/opendnssec.spec
@@ -1,10 +1,15 @@
+# Due to https://issues.redhat.com/browse/RHEL-70841, opendnssec cannot
+# be built on i686. The java_arches macro is not available at this time,
+# so we define it explicitly.
+%global java_arches aarch64 ppc64le s390x x86_64
+
 #global prever rcX
 %global _hardened_build 1
 
 Summary: DNSSEC key and zone management software
 Name: opendnssec
 Version: 2.1.10
-Release: 2%{?dist}
+Release: 3%{?dist}
 License: BSD
 Url: http://www.opendnssec.org/
 Source0: http://www.opendnssec.org/files/source/%{?prever:testing/}%{name}-%{version}%{?prever}.tar.gz
@@ -23,6 +28,9 @@ Patch1001: 1001-opendnssec-c99.patch
 
 Requires: opencryptoki, softhsm >= 2.5.0 , systemd-units
 Requires: libxml2, libxslt sqlite
+
+ExclusiveArch: %{java_arches}
+
 BuildRequires: make
 BuildRequires:  gcc
 BuildRequires: ldns-devel >= 1.6.12, sqlite-devel >= 3.0.0, openssl-devel
@@ -181,6 +189,10 @@ ods-enforcer update all >/dev/null 2>/dev/null ||:
 %systemd_postun_with_restart ods-signerd.service
 
 %changelog
+* Fri Jan 24 2025 Rafael Jeffman <rjeffman@redhat.com> - 2.1.10-3
+- Exclude i686 arch, as there's no OpenJDK 17 for this arch
+  Resolves: RHEL-75905
+
 * Wed Jan 22 2025 Rafael Jeffman <rjeffman@redhat.com> - 2.1.10-2
 - Use systemd-sysusers to create users
   Resolves: RHEL-75905