Interpreting Robust Optimization via Adversarial Influence Functions